Ransomfeed

CARD INFO

Dominio: eurofins.com
Registrar: Nameshield SAS
Motori AV recap
- Malevolo: 0
- Sospetto: 0
- Non rilevato: 30
- Innocuo: 64
Analisi Antivirus:

- Acronis: [harmless] clean
- 0xSI_f33d: [undetected] unrated
- Abusix: [harmless] clean
- ADMINUSLabs: [harmless] clean
- Axur: [undetected] unrated
- Criminal IP: [harmless] clean
- AILabs (MONITORAPP): [harmless] clean
- AlienVault: [harmless] clean
- alphaMountain.ai: [harmless] clean
- AlphaSOC: [undetected] unrated
- Antiy-AVL: [harmless] clean
- ArcSight Threat Intelligence: [undetected] unrated
- AutoShun: [undetected] unrated
- benkow.cc: [harmless] clean
- Bfore.Ai PreCrime: [undetected] unrated
- BitDefender: [harmless] clean
- Bkav: [undetected] unrated
- Blueliv: [harmless] clean
- Certego: [harmless] clean
- Chong Lua Dao: [harmless] clean
- CINS Army: [harmless] clean
- Cluster25: [undetected] unrated
- CRDF: [harmless] clean
- CSIS Security Group: [undetected] unrated
- Snort IP sample list: [harmless] clean
- CMC Threat Intelligence: [harmless] clean
- Cyan: [undetected] unrated
- Cyble: [harmless] clean
- CyRadar: [harmless] clean
- DNS8: [harmless] clean
- Dr.Web: [harmless] clean
- Ermes: [undetected] unrated
- ESET: [harmless] clean
- ESTsecurity: [harmless] clean
- EmergingThreats: [harmless] clean
- Emsisoft: [harmless] clean
- Forcepoint ThreatSeeker: [harmless] clean
- Fortinet: [harmless] clean
- G-Data: [harmless] clean
- GCP Abuse Intelligence: [undetected] unrated
- Google Safebrowsing: [harmless] clean
- GreenSnow: [harmless] clean
- Gridinsoft: [undetected] unrated
- Heimdal Security: [harmless] clean
- Hunt.io Intelligence: [undetected] unrated
- IPsum: [harmless] clean
- Juniper Networks: [harmless] clean
- Kaspersky: [harmless] clean
- Lionic: [harmless] clean
- Lumu: [undetected] unrated
- MalwarePatrol: [harmless] clean
- MalwareURL: [undetected] unrated
- Malwared: [harmless] clean
- Mimecast: [undetected] unrated
- Netcraft: [undetected] unrated
- OpenPhish: [harmless] clean
- Phishing Database: [harmless] clean
- PhishFort: [undetected] unrated
- PhishLabs: [undetected] unrated
- Phishtank: [harmless] clean
- PREBYTES: [harmless] clean
- PrecisionSec: [undetected] unrated
- Quick Heal: [harmless] clean
- Quttera: [harmless] clean
- SafeToOpen: [undetected] unrated
- Sansec eComscan: [undetected] unrated
- Scantitan: [harmless] clean
- SCUMWARE.org: [harmless] clean
- Seclookup: [harmless] clean
- SecureBrain: [undetected] unrated
- SOCRadar: [undetected] unrated
- Sophos: [harmless] clean
- Spam404: [harmless] clean
- StopForumSpam: [harmless] clean
- Sucuri SiteCheck: [harmless] clean
- ThreatHive: [harmless] clean
- Threatsourcing: [harmless] clean
- Trustwave: [harmless] clean
- Underworld: [undetected] unrated
- URLhaus: [harmless] clean
- URLQuery: [undetected] unrated
- Viettel Threat Intelligence: [harmless] clean
- VIPRE: [undetected] unrated
- VX Vault: [harmless] clean
- ViriBack: [harmless] clean
- Webroot: [harmless] clean
- Yandex Safebrowsing: [harmless] clean
- ZeroCERT: [harmless] clean
- desenmascara.me: [harmless] clean
- malwares.com URL checker: [harmless] clean
- securolytics: [harmless] clean
- Xcitium Verdict Cloud: [harmless] clean
- zvelo: [undetected] unrated
- ZeroFox: [undetected] unrated

Motori che NON classificano il dominio come harmless:

- 0xSI_f33d: undetected (unrated)
- Axur: undetected (unrated)
- AlphaSOC: undetected (unrated)
- ArcSight Threat Intelligence: undetected (unrated)
- AutoShun: undetected (unrated)
- Bfore.Ai PreCrime: undetected (unrated)
- Bkav: undetected (unrated)
- Cluster25: undetected (unrated)
- CSIS Security Group: undetected (unrated)
- Cyan: undetected (unrated)
- Ermes: undetected (unrated)
- GCP Abuse Intelligence: undetected (unrated)
- Gridinsoft: undetected (unrated)
- Hunt.io Intelligence: undetected (unrated)
- Lumu: undetected (unrated)
- MalwareURL: undetected (unrated)
- Mimecast: undetected (unrated)
- Netcraft: undetected (unrated)
- PhishFort: undetected (unrated)
- PhishLabs: undetected (unrated)
- PrecisionSec: undetected (unrated)
- SafeToOpen: undetected (unrated)
- Sansec eComscan: undetected (unrated)
- SecureBrain: undetected (unrated)
- SOCRadar: undetected (unrated)
- Underworld: undetected (unrated)
- URLQuery: undetected (unrated)
- VIPRE: undetected (unrated)
- zvelo: undetected (unrated)
- ZeroFox: undetected (unrated)

Analisi DNS

- Tipo: TXT, Valore: google-site-verification=AIQ0xMPOV2BHWo1O39vBf7BEYrlw69qiS2EzE4Lt2pQ
- Tipo: TXT, Valore: havspnvvhift5875ldu47pvleu
- Tipo: TXT, Valore: google-site-verification=K5r9vEWptYpHJpTX9OREmR7H0HKADww2m7wB9q8KNDY
- Tipo: NS, Valore: nsb.perf1.com
- Tipo: TXT, Valore: Mw5jjCJIrC02tN7MWq56e4y1hOBY2MjI02+4mARJIwM=
- Tipo: TXT, Valore: zoho-verification=zb95762081.zmverify.zoho.eu
- Tipo: TXT, Valore: 30dVhgZnSXPMj7hPGvGDajwxIUIDJJ1TR1y3revJ+xf8YpjfNwCyCsCuuhRvu+jOPaQ+Hl3IWXCHVy5qkP6MBg==
- Tipo: CAA, Valore: digicert.com
- Tipo: CAA, Valore: sectigo.com
- Tipo: TXT, Valore: bw=s5MUGFbO7jUiWOwoTOAe3WDynAin3KyPDUi27lEYJGKf
- Tipo: TXT, Valore: docusign=c33538e1-8e64-416a-9477-e3ea743da90a
- Tipo: TXT, Valore: d365mktkey=qx0wI5YJxzV1TzpNKFxbdz6Y6yQZLd1L6FbV3GgnDpMx
- Tipo: NS, Valore: nsz.perf1.com
- Tipo: NS, Valore: nsc.perf1.com
- Tipo: TXT, Valore: google-gws-recovery-domain-verification=58254154
- Tipo: NS, Valore: nsa.perf1.fr
- Tipo: TXT, Valore: google-gws-recovery-domain-verification=57361264
- Tipo: SOA, Valore: nsa.perf1.fr
- Tipo: TXT, Valore: wiz-domain-verification=534d9dd669d0ca1fb48cfe953725e824c480c8f51af980c62d0d31db9285fef2
- Tipo: TXT, Valore: docusign=1052fefd-bc1f-429f-832a-92d0b20fbff2
- Tipo: TXT, Valore: google-site-verification=fOU9OCfBsAsm2XrlVH99zoEw3ag-3DZ9E9_DZuWEVwE
- Tipo: TXT, Valore: MS=ms71093379
- Tipo: TXT, Valore: zoho-verification=zb82519448.zmverify.zoho.eu
- Tipo: TXT, Valore: google-gws-recovery-domain-verification=56989733
- Tipo: CAA, Valore: quovadisglobal.com
- Tipo: CAA, Valore: amazonaws.com
- Tipo: TXT, Valore: atlassian-domain-verification=z3yVvI2pt5/oe14N0hoyWeT8qxiF/k/q6etewtitEXWLtGKk5i3ODub6WHYJrVZl
- Tipo: TXT, Valore: onetrust-domain-verification=0064a5ebe35d4e2eb51363f2ee21f2f4
- Tipo: NS, Valore: nsz.perf1.fr
- Tipo: TXT, Valore: v=spf1 include:spf.eurofins.com -all
- Tipo: A, Valore: 3.33.155.245
- Tipo: TXT, Valore: zoho-verification=zb13397833.zmverify.zoho.eu
- Tipo: TXT, Valore: d365mktkey=MKt9MxBe2PxSzV5HJIlDiwmJWBMJsMXhuxuazLBPw1gx
- Tipo: TXT, Valore: atlassian-domain-verification=z1pneVF79MzOhmB8AJAt4FulEXWjZ9goqjpUmdBlEFsqUL0PsnjO/DB0oykY/nja
- Tipo: MX, Valore: eurofins-com.mail.protection.outlook.com
- Tipo: TXT, Valore: amazonses:ksWr25JBYK9VapS8/UDxiSQe35xcPjrT71CG0iYdUzU=
- Tipo: TXT, Valore: smartsheet-site-validation=zJfxNVqHMIwiUBybu5CUQ41-or9UFHHJ

Certificato HTTPS

- Emesso da: Amazon RSA 2048 M02
- Intestato a: eurofins.com
- Valido dal: 2025-05-12 00:00:00
- Valido fino al: 2026-06-10 23:59:59
- Algoritmo firma: RSA
- Versione: V3
- Serial number: ca657456958b582dc4e8ed562d278fe

LEAKS NOTI e MALWARE Raw data by HudsonRock
Summary
🧠 Dispositivi infetti: 372
🌐 Utenti compromessi: 204
🧑‍💼 Utenti aziendali compromessi: 168
🔑 Password aziendali esposte: 198
🔑 Password users esposte: 277
🧬 Stealer family e conteggio

RedLine: 270
Lumma: 148
Generic Stealer: 60
Raccoon: 82
Vidar: 36
StealC: 30
Azorult: 12
UNKNOWN: 8
CRYPTBOT: 2

🏢 Utenze aziendali compromesse (link/conteggio)

https://connect.eurofins.com/adfs/oauth2/authorize: 76
https://webmail.eurofins.com/auth: 35
https://fs.eurofins.com: 35
https://fs.eurofins.com/adfs/ls: 26
https://webmail.eurofins.com: 17
https://••.eurofins.com/••••/••/: 13
https://•••••••.eurofins.com/••••/: 11
https://•••••••.eurofins.com/••••/••••••••••••••: 10
https://••••••••.eurofins.com/•••/•••••.••••: 10
https://•••••••.eurofins.com/••••/••••••/•••••••••/: 7
https://••••••••.eurofins.com/•••/•••••.••••: 6
https://•••-••••••••-••••••.eurofins.com: 6
https://•••••••.eurofins.com/: 5
https://•••-••••••••-••••••.eurofins.com/•••••.•••: 4
https://•••.eurofins.com: 3
https://•••.eurofins.com/•••••.•••: 3
https://••••••-•••••••.eurofins.com/••••/••••••••••••••: 3
https://••.eurofins.com/: 1
https://•••.eurofins.com/••••-••/••••/•••_•/•••••••.•••: 1
https://•••••••.eurofins.com/••••/•••••••••: 1
https://••.eurofins.com/••••/••/••••••••••••••••••.••••: 1
https://•••••.••••-••••••••.eurofins.com/•••••••: 1
https://•••.eurofins.com/••••/••••••/•••••••••: 1

🔐 Utenze users compromesse

🛡️ Antivirus rilevati

Norton 360: 1
Norton Security: 1
ESET Smart Security 8.0: 1
Malwarebytes: 1
ESET Security: 1
Not Found: 46
IObit Malware Fighter: 1
Windows Defender: 27
KPN Veilig by F-Secure: 1
Avast Antivirus: 4