Loading...
CARD
INFO
Dominio: corantioquia.gov.co
Registrar: .CO Internet S.A.S.
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 32
- Innocuo: 62
Analisi Antivirus:
Motori che NON classificano il dominio come harmless:
Analisi DNS
Certificato HTTPS
LEAKS NOTI e MALWARE
Raw data
by HudsonRock
Summary
🧠 Dispositivi infetti: 122
🌐 Utenti compromessi: 110
🧑💼 Utenti aziendali compromessi: 12
🔑 Password aziendali esposte: 27
🔑 Password users esposte: 232
🧬 Stealer family e conteggio
🏢 Utenze aziendali compromesse (link/conteggio)
🔐 Utenze users compromesse
🛡️ Antivirus rilevati
Dominio: corantioquia.gov.co
Registrar: .CO Internet S.A.S.
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 32
- Innocuo: 62
Analisi Antivirus:
- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [undetected] unrated
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [undetected] unrated
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [undetected] unrated
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [undetected] unrated
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [undetected] unrated
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [undetected] unrated
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [undetected] unrated
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [undetected] unrated
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated
- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- alphaMountain.ai: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- SOCRadar: undetected (unrated)
- Underworld: undetected (unrated)
- URLQuery: undetected (unrated)
- VIPRE: undetected (unrated)
- Xcitium Verdict Cloud: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)
- Axur: undetected (unrated)
- alphaMountain.ai: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- SOCRadar: undetected (unrated)
- Underworld: undetected (unrated)
- URLQuery: undetected (unrated)
- VIPRE: undetected (unrated)
- Xcitium Verdict Cloud: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)
- Tipo: NS, Valore: lauta.une.net.co
- Tipo: TXT, Valore: sophos-domain-verification=f76036d9f510e4b861d4654800e147e9481c5ec1
- Tipo: TXT, Valore: nA87pChc+GcLVdw9duoAAc4lP5/6E9lVa+jeemVL+Vnu3sfTKHUA3dWL/nUJJ9iEX3Wfm04+Sdu/3az95wD3Tw==
- Tipo: TXT, Valore: google-site-verification=UqTIAAEpn9WwFt1dau6h2wUx_x-WooI8awx5q6BPdx0
- Tipo: SOA, Valore: lauta.une.net.co
- Tipo: TXT, Valore: MS=ms40471836
- Tipo: NS, Valore: birlocha.une.net.co
- Tipo: MX, Valore: mx-02-us-east-2.prod.hydra.sophos.com
- Tipo: TXT, Valore: ueppq58taj4na8v912phvu7tt7
- Tipo: TXT, Valore: v=spf1 ip4:200.35.34.160/27 include:_spf.prod.hydra.sophos.com ~all
- Tipo: A, Valore: 200.35.34.162
- Tipo: MX, Valore: mx-01-us-east-2.prod.hydra.sophos.com
- Tipo: NS, Valore: nsbog01.une.net.co
- Tipo: TXT, Valore: sophos-domain-verification=f76036d9f510e4b861d4654800e147e9481c5ec1
- Tipo: TXT, Valore: nA87pChc+GcLVdw9duoAAc4lP5/6E9lVa+jeemVL+Vnu3sfTKHUA3dWL/nUJJ9iEX3Wfm04+Sdu/3az95wD3Tw==
- Tipo: TXT, Valore: google-site-verification=UqTIAAEpn9WwFt1dau6h2wUx_x-WooI8awx5q6BPdx0
- Tipo: SOA, Valore: lauta.une.net.co
- Tipo: TXT, Valore: MS=ms40471836
- Tipo: NS, Valore: birlocha.une.net.co
- Tipo: MX, Valore: mx-02-us-east-2.prod.hydra.sophos.com
- Tipo: TXT, Valore: ueppq58taj4na8v912phvu7tt7
- Tipo: TXT, Valore: v=spf1 ip4:200.35.34.160/27 include:_spf.prod.hydra.sophos.com ~all
- Tipo: A, Valore: 200.35.34.162
- Tipo: MX, Valore: mx-01-us-east-2.prod.hydra.sophos.com
- Tipo: NS, Valore: nsbog01.une.net.co
- Emesso da: Sectigo RSA Organization Validation Secure Server CA
- Intestato a: *.corantioquia.gov.co
- Valido dal: 2025-02-21 00:00:00
- Valido fino al: 2026-02-24 23:59:59
- Algoritmo firma: RSA
- Versione: V3
- Serial number: 72bddd79b29b31284b8cf789ba1aa7c7
- Intestato a: *.corantioquia.gov.co
- Valido dal: 2025-02-21 00:00:00
- Valido fino al: 2026-02-24 23:59:59
- Algoritmo firma: RSA
- Versione: V3
- Serial number: 72bddd79b29b31284b8cf789ba1aa7c7
Summary
🧠 Dispositivi infetti: 122
🌐 Utenti compromessi: 110
🧑💼 Utenti aziendali compromessi: 12
🔑 Password aziendali esposte: 27
🔑 Password users esposte: 232
🧬 Stealer family e conteggio
RedLine: 57
Generic Stealer: 20
Lumma: 19
Raccoon: 15
StealC: 5
DarkCrystal: 2
Azorult: 1
Vidar: 1
CRYPTBOT: 1
Generic Stealer: 20
Lumma: 19
Raccoon: 15
StealC: 5
DarkCrystal: 2
Azorult: 1
Vidar: 1
CRYPTBOT: 1
https://aplicaciones.corantioquia.gov.co/RDWeb/Pages/en-US/login.aspx: 10
https://aplicaciones.corantioquia.gov.co/rdweb/pages/en-us/login.aspx: 6
https://correo.corantioquia.gov.co/owa/auth/logon.aspx: 4
https://aplicaciones.corantioquia.gov.co/vpn/index.html: 2
https://aplicaciones.corantioquia.gov.co/Citrix/XenApp/auth/login.aspx: 2
https://••••••.corantioquia.gov.co/•••/••••/•••••.••••: 2
http://•••••••••••••••••••.corantioquia.gov.co/•••••/•••••.•••: 1
https://aplicaciones.corantioquia.gov.co/rdweb/pages/en-us/login.aspx: 6
https://correo.corantioquia.gov.co/owa/auth/logon.aspx: 4
https://aplicaciones.corantioquia.gov.co/vpn/index.html: 2
https://aplicaciones.corantioquia.gov.co/Citrix/XenApp/auth/login.aspx: 2
https://••••••.corantioquia.gov.co/•••/••••/•••••.••••: 2
http://•••••••••••••••••••.corantioquia.gov.co/•••••/•••••.•••: 1
-
https://sirena.corantioquia.gov.co/lago/CtrlIniciarApp: 84
http://sirena.corantioquia.gov.co/lago/CtrlIniciarApp: 51
http://sirena.corantioquia.gov.co/lago/ctrliniciarapp: 17
https://sirena.corantioquia.gov.co/lago/ctrliniciarapp: 16
https://geografico.corantioquia.gov.co/mapgis/mapa.jsp: 14
http://••••••.corantioquia.gov.co: 7
https://•••••••••.corantioquia.gov.co/••••••••: 6
https://••••••••••.corantioquia.gov.co/•••••••••: 6
http://••••••.corantioquia.gov.co/•••••••/•••••••••••••••••••: 4
https://••••••.corantioquia.gov.co/•••••••/•••••••••••••••••••: 4
https://••••••.corantioquia.gov.co: 3
https://••••••••••.corantioquia.gov.co: 3
https://•••••••••.corantioquia.gov.co/•••••: 2
https://••••••••••.corantioquia.gov.co/•••••••••••••/•••••: 2
http://••••••••••.corantioquia.gov.co/••••••/••••.•••: 2
https://••••••••••.corantioquia.gov.co/•••••••/••••.•••: 2
https://••••••••••••.corantioquia.gov.co/: 1
https://••••••••••••.corantioquia.gov.co: 1
http://•••.corantioquia.gov.co: 1
https://••••••••-••••••.corantioquia.gov.co: 1
https://••••••••-••••••.corantioquia.gov.co/••-•••••.•••: 1
https://•••.corantioquia.gov.co/••-•••••.•••: 1
http://••••••••••••.corantioquia.gov.co: 1
https://•••••••.corantioquia.gov.co/•••••_•••••••••: 1
https://•••••••.corantioquia.gov.co/•••••••••••••.••: 1
https://•••.corantioquia.gov.co: 1
Windows Defender: 3
Total AV [OFF]: 1
Not Found: 4
360 Total Security: 1
Total AV [OFF]: 1
Not Found: 4
360 Total Security: 1