Loading...
CARD INFO

Dominio: nal.com
Registrar: Network Solutions, LLC
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 30
- Innocuo: 64
Analisi Antivirus:
- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [undetected] unrated
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [undetected] unrated
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [harmless] clean
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated
Motori che NON classificano il dominio come harmless:
- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- SOCRadar: undetected (unrated)
- Underworld: undetected (unrated)
- URLQuery: undetected (unrated)
- VIPRE: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)
Analisi DNS
- Tipo: TXT, Valore: m28haleq13bhe1q1nm4qvicn4r
- Tipo: A, Valore: 157.230.11.240
- Tipo: NS, Valore: ns51.constellix.net
- Tipo: NS, Valore: ns21.constellix.com
- Tipo: NS, Valore: ns11.constellix.com
- Tipo: NS, Valore: ns41.constellix.net
- Tipo: TXT, Valore: hJr1SfJXg5KCcB0MsM/4ey2ouzEArgmeDvk44VUvJ1lEuQSa5gPwRN1RbcAm/cfVuQCWHNgWAMvQUj8ebN5E+g==
- Tipo: TXT, Valore: jsl8pno41ie5d369a4li05muo8
- Tipo: SOA, Valore: ns11.constellix.com
- Tipo: TXT, Valore: successfactors-site-verification=NjU0OWNhYzk2N2ZhNWRhMWZkYzg4NmEyMjFhZjIxNzI0YzUyYmQzZWI0Njk5ZGFiNmZiNTU4ZmM3OWQxNDk4NQ==
- Tipo: NS, Valore: ns61.constellix.net
- Tipo: TXT, Valore: mpush6upi1e39mho2p1qrbjpug
- Tipo: TXT, Valore: google-site-verification=xTwsCyh6Jb0iIW5PmoOuRLhaLfB1O1VC8_phHHDjTQs
- Tipo: TXT, Valore: cisco-ci-domain-verification=66bd2f640f53e502cc477eabcddba8ccb2499b7e478bc3280d8bb0a144d53bf0
- Tipo: TXT, Valore: 6cqigrkk35707m9h09v7f40d33
- Tipo: TXT, Valore: v=spf1 mx ip4:70.42.227.151 ip4:70.42.227.152 ip4:20.10.24.226 ip4:20.96.12.43 ip4:20.1.130.13 ip4:20.1.128.197 ip4:76.161.236.44 ip4:207.188.124.236 include:spf.protection.outlook.com include:prodmail68c.sapsf.com include:prodmail68a.sapsf.com include:pr
- Tipo: NS, Valore: ns31.constellix.com
- Tipo: MX, Valore: nal-com.mail.protection.outlook.com
- Tipo: TXT, Valore: vs0rnsqu15akt54rrq0hli5dsg
Certificato HTTPS
- Emesso da: R10
- Intestato a: nal.com
- Valido dal: 2025-04-25 03:16:45
- Valido fino al: 2025-07-24 03:16:44
- Algoritmo firma: RSA
- Versione: V3
- Serial number: 58e704f6d06289c7f69d1367eab290c89a6
LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 9
🌐 Utenti compromessi: 5
🧑‍💼 Utenti aziendali compromessi: 4
🔑 Password aziendali esposte: 3
🔑 Password users esposte: 5
🧬 Stealer family e conteggio
RedLine: 5
Azorult: 2
Generic Stealer: 1
UNKNOWN: 2
Lumma: 3
🏢 Utenze aziendali compromesse (link/conteggio)
https://healthcheck.nal.com: 2
https://itsc.nal.com/service/webobjects/service.woa/wo/3.15.7.3.1: 1
https://webmail.nal.com/names.nsf: 1
https://itsc.nal.com/Service/WebObjects/Service.woa/wo/4.15.7.3.1: 1
🔐 Utenze users compromesse
    https://healthcheck.nal.com/Login.asp: 4
    http://cortce02.paris.nal.com:9081/naltcweb/controller/home: 1
    https://cormail1.nal.com/names.nsf: 1
    https://healthcheck.nal.com/login.asp: 1
    https://itsc.nal.com/service/webobjects/service.woa/wo/2.15.7.3.1: 1
    https://••••.nal.com/•••••••/••••••••••/•••••••.•••/••/•.••.•.•.•: 1
    https://•••••••••••.nal.com: 1
🛡️ Antivirus rilevati
Not Found: 5
Windows Defender: 5

Questo script colleziona ogni rivendicazione criminale esattamente come esposta dalle fonti (modello "As Is"), in un database SQL per creare un feed permanente, che può anche essere seguito con tecnologia RSS.
Il motore è basato sul progetto ransomFeed, fork in GitHub.