Ransomfeed

CARD INFO

Dominio: marriott.com
Registrar: CSC CORPORATE DOMAINS, INC.
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 29
- Innocuo: 65
Analisi Antivirus:

- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [harmless] clean
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [undetected] unrated
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [undetected] unrated
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [harmless] clean
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [harmless] clean
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated

Motori che NON classificano il dominio come harmless:

- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- SOCRadar: undetected (unrated)
- Trustwave: undetected (unrated)
- Underworld: undetected (unrated)
- VIPRE: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)

Analisi DNS

- Tipo: TXT, Valore: canva-site-verification=jksL3Zvuljo2ex9weFenew
- Tipo: MX, Valore: marriott-com.mail.protection.outlook.com
- Tipo: TXT, Valore: amazonses:T+PiZncc85hp45Hh5rxnadRc3PqQCxeWhb2Iulxh+HI=
- Tipo: NS, Valore: ns1-22.akam.net
- Tipo: NS, Valore: eur1.akam.net
- Tipo: TXT, Valore: EMMA-VALIDATION2-22-21
- Tipo: TXT, Valore: MS=ms72490600
- Tipo: TXT, Valore: infoblox-domain-mastery=078e97082eaa5be71d1011466d456249102dd95393572d0c23d7652a65d4dec5cf
- Tipo: TXT, Valore: atlassian-domain-verification=zzbKNynGXmBVVjHMpHdfFpEwzGxKV5plDTgGo00mBnx6f3sEd30UmA/w/TPcy9Ai
- Tipo: TXT, Valore: e2ma-verification=2m0fb
- Tipo: TXT, Valore: amazonses:ycQqj6K4JaTXJZHZIcYKm+rZk3kf0+CDo58LI2UwkR0=
- Tipo: TXT, Valore: e2ma-verification=g83fb
- Tipo: TXT, Valore: Dynatrace-site-verification=b018e42d-1bf3-4214-a55d-b6d11d472484__dkbokapmaohqnqf6rjt4vc75d1
- Tipo: TXT, Valore: adobe-idp-site-verification=b58a812cb8a67904b7b89c5ba71e21242157d93cc4609f572f4d63398d2f1c95
- Tipo: NS, Valore: eur3.akam.net
- Tipo: TXT, Valore: apple-domain-verification=0BpDQkck5deFVztA
- Tipo: TXT, Valore: e2ma-verification=5nbgb
- Tipo: TXT, Valore: liveramp-site-verification=dphz_fboDvNf-L04XjGWSNpfcEjqykIGaOetpgtRFrY
- Tipo: TXT, Valore: flexera-domain-verification-jbnluuhrebvugcmr
- Tipo: TXT, Valore: e2ma-verification=t4xeb
- Tipo: NS, Valore: usc2.akam.net
- Tipo: NS, Valore: ns1-7.akam.net
- Tipo: TXT, Valore: e2ma-verification=8oreb
- Tipo: TXT, Valore: DocuSign-JAS-3f8670aa-a7b3-4c80-b87c-c4009cf24fef
- Tipo: NS, Valore: usc1.akam.net
- Tipo: TXT, Valore: _vo9fuuxfwrimz2thuq6vane5ixcrnre
- Tipo: TXT, Valore: docusign=b47573dd-01c3-49a8-9014-26e813e1c8d2
- Tipo: TXT, Valore: e2ma-verification=puqeb
- Tipo: TXT, Valore: amazonses:TdaQ33Ma34JA3mbWth3J30gcPqfDoCkl/gpcDpdk1hM=
- Tipo: TXT, Valore: e2ma-verification=r4qcb
- Tipo: TXT, Valore: onetrust-domain-verification=c8419e55a9f44fd3a2aea1086589b47c
- Tipo: TXT, Valore: cisco-ci-domain-verification=510f4042252171cd62c2992306c3623499318270fcef3f0266e4bc2bc4df9053
- Tipo: TXT, Valore: figma-domain-verification=92316758906766ace0ee6271ca4f1ccf3795fce0f1925f846f4a5ee4c3dd0cfb-1732030374
- Tipo: A, Valore: 23.210.20.117
- Tipo: TXT, Valore: amazonses:dRwYaeqcRYgOr0nfuNpgfwcye7qC/+W7j9+4l95WmfA=
- Tipo: TXT, Valore: h1-domain-verification=3bPxkTRBe4uck7trDLA9BEguQdHUTpEsbin4kgsAepgHSnsi
- Tipo: TXT, Valore: e2ma-verification=zhe3
- Tipo: SOA, Valore: use4.akam.net
- Tipo: TXT, Valore: docusign=a75f5992-a1f4-42fb-b1fb-36850d8e976a
- Tipo: TXT, Valore: e2ma-verification=g23cb
- Tipo: NS, Valore: use4.akam.net
- Tipo: TXT, Valore: facebook-domain-verification=7yktss7qob13nc0gahxo6028udc8ti
- Tipo: TXT, Valore: e2ma-verification=hsbcb
- Tipo: NS, Valore: eur4.akam.net
- Tipo: TXT, Valore: e2ma-verification=rzicb
- Tipo: TXT, Valore: google-site-verification=vGWnWWqZZS-wOwob2dGmMK44ncOOD3s3Vy7mkUR2CQk
- Tipo: TXT, Valore: e2ma-verification=i7b3
- Tipo: TXT, Valore: v=spf1 include:spf.marriott.com include:_spf.caspiomail.com include:spf.givex.com include:mail.zendesk.com a:c.spf.service-now.com include:spf.protection.outlook.com
- Tipo: TXT, Valore: NhJc80JClTwLvKuJzmJzVRWhiX7JEubBi8Tegyp1MyGbRSn0bMKddsgokifhxw2JuZ76PZ8qFHYEW9Aa8ykiwQ==
- Tipo: TXT, Valore: e2ma-verification=5eigb

Certificato HTTPS

- Emesso da: Entrust Certification Authority - L1K
- Intestato a: www.marriott.com
- Valido dal: 2024-09-09 17:10:43
- Valido fino al: 2025-10-09 17:10:42
- Algoritmo firma: RSA
- Versione: V3
- Serial number: 6adecfd3a4265f828dc32a588b062e81

LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 32256
🌐 Utenti compromessi: 32071
🧑‍💼 Utenti aziendali compromessi: 185
🔑 Password aziendali esposte: 226
🔑 Password users esposte: 10000
🧬 Stealer family e conteggio

RedLine: 9968
Generic Stealer: 6741
Lumma: 6524
Raccoon: 2786
Azorult: 2719
StealC: 1490
Vidar: 1010
UNKNOWN: 474
Atomic: 120
CRYPTBOT: 88
DarkCrystal: 46
Mystic: 33
Taurus: 23
Predator: 21
Ficker: 9
KPOT: 2

🏢 Utenze aziendali compromesse (link/conteggio)

https://owa.marriott.com/owa/auth/logon.aspx: 96
https://owa.marriott.com: 42
https://owa.marriott.com/cookieauth.dll: 28
https://owa.marriott.com/CookieAuth.dll: 28
https://confluence.marriott.com/login.action: 17
https://•••.marriott.com/•••/••••.•••: 9
https://•••••••••••••.marriott.com: 8
https://•••••••••.marriott.com/•••••.•••: 8
https://•••.marriott.com/: 8
https://•••••••••.marriott.com/••••/•••••: 7
https://••••••••.marriott.com/•••••••/•••/•••.•••: 6
https://•••••••••.marriott.com/••••/•••••/••••_•••••••: 4
http://•••.marriott.com: 4
https://••••••••.marriott.com/: 3
https://•••.marriott.com/•••••••.••: 3
https://•••••••••••••.marriott.com/•••••/•••••_•••••••/••••••••/••••••: 3
http://•••.marriott.com/: 2
https://•••.marriott.com/: 2
https://•••.marriott.com: 2
https://••••••••.marriott.com: 2
https://•••••••••.marriott.com: 2
https://•••••••••.marriott.com/••••••/•••••••••.••••: 2
https://••••.marriott.com/•••••.•••: 2
http://•••.marriott.com/•••/••••/•••••.••••: 1
https://•••••••••••••••.•••••.••••••••.marriott.com/••••••/•••••/•••/•••••••.•••••: 1
https://•••.marriott.com/•••••••••••/•••••••••.••: 1
https://•••.marriott.com/•••••••••••/••••••••••••.••: 1
https://••••••••••.marriott.com/••••••••/•••••: 1
https://••••••.marriott.com: 1
https://•••••••••••.marriott.com/••••••••••••/•••••: 1
https://•••••••.marriott.com/•••••••/••••_•••••/•••••••.•••: 1

🔐 Utenze users compromesse

🛡️ Antivirus rilevati

Reason Cybersecurity: 3
Total AV: 1
Avast Antivirus: 1
Norton AntiVirus: 2
VirusScan de McAfee : 1
Windows Defender: 65
Kaspersky Internet Security: 1
ESET Firewall: 1
Malwarebytes: 1
McAfee Firewall: 6
McAfee VirusScan: 5
Not Found: 108
Norton Security: 1
ESET Security: 1
McAfee Anti-Virus and Anti-Spyware: 1
Bitdefender: 1