Loading...
CARD INFO

Dominio: ahdubai.com
Registrar: Network Solutions, LLC
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 30
- Innocuo: 64
Analisi Antivirus:
- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [harmless] clean
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [undetected] unrated
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [undetected] unrated
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated
Motori che NON classificano il dominio come harmless:
- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- Underworld: undetected (unrated)
- URLQuery: undetected (unrated)
- VIPRE: undetected (unrated)
- Xcitium Verdict Cloud: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)
Analisi DNS
- Tipo: MX, Valore: ahdubai-com.mail.protection.outlook.com
- Tipo: NS, Valore: ns82.worldnic.com
- Tipo: TXT, Valore: tmes=25687f04bb169e398718c377b495e0a2
- Tipo: SOA, Valore: NS81.WORLDNIC.com
- Tipo: MX, Valore: emailsecurity.ahdubai.com
- Tipo: A, Valore: 162.214.204.30
- Tipo: NS, Valore: ns81.worldnic.com
- Tipo: TXT, Valore: google-site-verification=5H2i-mREEpHt1S3Pn6Xse5ueI_dc8j51soophLcuopA
- Tipo: TXT, Valore: bOryXou4oCPcrRU+MtCi1UmEWPSuYpM+Ddsao/3mtL/RcTJ/Jj6uNOKnMX8JUsFBIlwZR7mGojr6oHSB27Vwwg==
- Tipo: TXT, Valore: MS=B676B22BEE16903C3A43D96C275BCB4AC30B8981
- Tipo: TXT, Valore: MS=ms31450499
- Tipo: TXT, Valore: v=spf1 a mx include:spf.protection.outlook.com include:spf.ae.signature365.net include:_spf.salesforce.com include:servers.mcsv.net include:amazonses.com include:eu.rp.oracleemaildelivery.com ~all
Certificato HTTPS
- Emesso da: DigiCert Global G2 TLS RSA SHA256 2020 CA1
- Intestato a: *.ahdubai.com
- Valido dal: 2024-08-06 00:00:00
- Valido fino al: 2025-09-05 23:59:59
- Algoritmo firma: RSA
- Versione: V3
- Serial number: 80b7a5c231bbf3a7c2e649d8d240715
LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 30
🌐 Utenti compromessi: 26
🧑‍💼 Utenti aziendali compromessi: 4
🔑 Password aziendali esposte: 3
🔑 Password users esposte: 34
🧬 Stealer family e conteggio
RedLine: 12
Generic Stealer: 8
Lumma: 5
StealC: 2
Atomic: 1
Raccoon: 1
Vidar: 1
🏢 Utenze aziendali compromesse (link/conteggio)
https://extranet.ahdubai.com/vpn/index.html: 2
https://webmail.ahdubai.com/owa/auth/logon.aspx: 2
https://webmail.ahdubai.com: 1
https://webmail.ahdubai.com/ecp/PersonalSettings/Password.aspx: 1
🔐 Utenze users compromesse
    https://ahd-ise-2.ahdubai.com:8443/portal/portalsetup.action: 7
    https://telehealth.ahdubai.com/app/web/front/default/set-credentials: 7
    https://ahd-ise-1.ahdubai.com: 4
    https://ahd-ise-1.ahdubai.com:8443/portal/PortalSetup.action: 3
    https://www.ahdubai.com/admin/signin: 3
    https://•••-•••-•.ahdubai.com:••••/••••••/•••••••••••.••••••: 2
    https://•••-•••-•.ahdubai.com/: 2
    https://•••-•••-•.ahdubai.com:••••/••••••/•••••••••••.••••••: 2
    https://••••••••••.ahdubai.com/•••/•••/•••••/•••••••/•••••: 2
    https://••••••••••.ahdubai.com/•••/•••/•••••: 2
    https://••••••.ahdubai.com/••••••: 1
    https://••••••••.ahdubai.com: 1
🛡️ Antivirus rilevati
Not Found: 1

Questo script colleziona ogni rivendicazione criminale esattamente come esposta dalle fonti (modello "As Is"), in un database SQL per creare un feed permanente, che può anche essere seguito con tecnologia RSS.
Il motore è basato sul progetto ransomFeed, fork in GitHub.