magento.com

Why it matters

Infostealer intelligence may contain credentials associated with the domain, but it does not prove that an account is current, valid, or still exposed.

What to do

Review the masked evidence and observation time, validate affected accounts and devices, then reset active credentials and sessions, enforce MFA, and remove malware where confirmed.

Evidence and check scope

How exposed email records are matched:

Only email addresses whose domain exactly matches this website

Collection refresh status:

completed

Matching exposed email records:

26

The actual record count may be higher:

No

Estimated infostealer-infected devices:

11

Device count is estimated:

Yes

How to interpret this evidence:

Matched records contain an email address whose domain exactly matches the assessed website's registrable domain. Credential records are intelligence observations, not proof that an account is still active. Estimated victim devices are infostealer infection devices associated with matched records; they are not evidence that those devices are owned or operated by the assessed organization.

Evidence samples available:

Yes

Evidence samples shown:

10

Evidence sample limit:

10

8 additional evidence fields are not shown here.

Why it matters

DNSSEC adds digital signatures so resolvers can detect forged DNS answers. This quick check looks for a DS record at the parent domain; a passing result confirms that delegation signal, but it does not validate the complete signature chain.

What to do

Sign the DNS zone, publish the matching DS record through the registrar, and monitor the signature chain after key changes.