Ransomfeed

CARD INFO

Dominio: sktelecom.com
Registrar: Gabia, Inc.
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 30
- Innocuo: 65
Analisi Antivirus:

- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- ChainPatrol: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [harmless] clean
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [harmless] clean
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [undetected] unrated
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated

Motori che NON classificano il dominio come harmless:

- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- ChainPatrol: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- Underworld: undetected (unrated)
- VIPRE: undetected (unrated)
- Xcitium Verdict Cloud: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)

Analisi DNS

- Tipo: TXT, Valore: google-site-verification=3tFTxBrIp9V-E8sVrbDwFvRj-Dn5KWmrH38MdW0FYlU
- Tipo: SOA, Valore: gate4.sktelecom.com
- Tipo: TXT, Valore: MS=ms31428633
- Tipo: NS, Valore: gate2.sktelecom.com
- Tipo: NS, Valore: gate3.sktelecom.com
- Tipo: NS, Valore: gate4.sktelecom.com
- Tipo: TXT, Valore: E8kOQeX6ugARshENkoQaFNcQ8ZkpCFCJSRaiKTh71yGgFM8Z+FZI/HryKfTvIa6DTG+3Uy6L+8C0ugN2ucIX5w==
- Tipo: TXT, Valore: google-site-verification=rfz4DwqqWLR5vHN9iCTpy85b3fTbNZ4ev8TIVRj8L5g
- Tipo: NS, Valore: gate.sktelecom.com
- Tipo: MX, Valore: spmail.sk.com
- Tipo: A, Valore: 4.230.154.142
- Tipo: TXT, Valore: google-site-verification=XA67vT9CQx-d_DlXZ-qaWMO0dvYQZC9ZAjfgmPXVU5g
- Tipo: TXT, Valore: google-site-verification=kACDvWPcEqC9jqq9xtvYeJKPJ-GsqpQzuEtZhjMDzJ8
- Tipo: TXT, Valore: v=spf1 ip4:220.103.255.156/31 ip4:220.103.255.36 ip4:203.236.20.104/29 ip4:203.236.1.80/28 ip4:203.236.20.1/26 ip4:203.236.1.102/31 ip4:203.236.1.192/27 ip4:211.188.154.57 ip4:3.34.13.255 ip4:223.62.24

Certificato HTTPS

- Emesso da: Sectigo RSA Extended Validation Secure Server CA
- Intestato a: www.sktelecom.com
- Valido dal: 2025-08-11 00:00:00
- Valido fino al: 2026-09-11 23:59:59
- Algoritmo firma: RSA
- Versione: V3
- Serial number: df7e3a9cad132c58cabf243bf7555812

LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 732
🌐 Utenti compromessi: 677
🧑‍💼 Utenti aziendali compromessi: 55
🔑 Password aziendali esposte: 61
🔑 Password users esposte: 1103
🧬 Stealer family e conteggio

RedLine: 470
Generic Stealer: 149
Lumma: 254
Raccoon: 112
StealC: 97
Vidar: 70
Azorult: 20
UNKNOWN: 18
CRYPTBOT: 14
Atomic: 10
Ficker: 8
Mystic: 6
Taurus: 2

🏢 Utenze aziendali compromesse (link/conteggio)

https://nmcvpn.sktelecom.com/dana-na/auth/url_default/welcome.cgi: 23
https://tde.sktelecom.com/tde/tool/CONFLUENCE: 11
https://tde.sktelecom.com/tde/tool/JIRA: 9
https://sts.sktelecom.com/adfs/ls: 8
https://contact.sktelecom.com/citrix/storeweb/: 6
https://•••.sktelecom.com: 4
https://••••••.sktelecom.com/••••-••/••••/•••_•••••••/•••••••.•••: 3
https://•••.sktelecom.com/••••/••/: 3
https://•••.sktelecom.com/•••/••••/••••••••••: 3
https://••••.sktelecom.com/•••/•••/••_••••••••••.•••: 3
http://•••••••.sktelecom.com/•••••.•••: 2
https://••••.sktelecom.com/•••/•••/••_••••••••••.•••: 2
https://•••••••.sktelecom.com/••••••/••••••••: 2
https://•••.sktelecom.com/: 1
https://••••••.sktelecom.com/••••••/•••••••••••/••••••••_••••.••••: 1
https://•••.sktelecom.com/: 1
https://••••••••••••.sktelecom.com/•••/••••/••••••••.•••: 1
https://••••••.sktelecom.com:••••/••••/•••••.•••: 1

🔐 Utenze users compromesse

🛡️ Antivirus rilevati

Not Found: 15
알약: 5
Windows Defender: 8