{"id":13807,"date":"2026-04-02T18:01:04","date_gmt":"2026-04-02T16:01:04","guid":{"rendered":"https:\/\/fortgale.com\/it\/?page_id=13807"},"modified":"2026-04-02T18:02:28","modified_gmt":"2026-04-02T16:02:28","slug":"feed-di-intelligence","status":"publish","type":"page","link":"https:\/\/fortgale.com\/it\/feed-di-intelligence\/","title":{"rendered":"Feed Intelligence IOC"},"content":{"rendered":"
\n \n
\n \n \n
\n \n
\n \n
\n \n
\n
\n \n \n
\n \n
\n \n
\n \n\n\n\n \n \n Feed di Intelligence | IOC Phishing, C2, Malware e Ransomware \u2014 Fortgale<\/title>\n <meta name=\"description\" content=\"Fortgale produce oltre 34.000 indicatori settimanali su domini di phishing, C2, malware e ransomware. Intelligence proprietaria su CobaltStrike, BruteRatel, Lumma Stealer, Matanbuchus e oltre 200 threat actor e strumenti offensivi monitorati dal team Fortgale.\">\n <meta name=\"keywords\" content=\"feed intelligence IOC, phishing domini, C2 server, malware indicators, ransomware IOC, infostealer intelligence, CobaltStrike C2, BruteRatel, Matanbuchus, Lumma Stealer, phishing kit, threat intelligence feed, indicatori compromissione, threat actor monitoring\">\n <meta name=\"robots\" content=\"index, follow\">\n <link rel=\"canonical\" href=\"https:\/\/fortgale.com\/it\/feed-di-intelligence\/\">\n\n <meta property=\"og:title\" content=\"Feed di Intelligence IOC \u2014 34k Indicatori Settimanali | Fortgale\">\n <meta property=\"og:description\" content=\"Oltre 34.000 IOC settimanali su phishing, C2, ransomware e malware. 200+ threat actor e strumenti offensivi monitorati. Intelligence operativa interamente prodotta e validata dal team Fortgale.\">\n <meta property=\"og:type\" content=\"website\">\n <meta property=\"og:url\" content=\"https:\/\/fortgale.com\/it\/feed-di-intelligence\/\">\n <meta property=\"og:image\" content=\"https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2026\/03\/Copia-di-Servizi.png\">\n\n <script type=\"application\/ld+json\">\n {\n \"@context\": \"https:\/\/schema.org\",\n \"@type\": \"WebPage\",\n \"name\": \"Feed di Intelligence IOC \u2014 Fortgale\",\n \"url\": \"https:\/\/fortgale.com\/it\/feed-di-intelligence\/\",\n \"description\": \"Fortgale produce oltre 34.000 indicatori di compromissione settimanali su domini di phishing, server C2, malware, ransomware e infostealer. Intelligence proprietaria su oltre 200 threat actor e strumenti offensivi tra cui CobaltStrike, BruteRatel, Matanbuchus e Lumma Stealer.\",\n \"inLanguage\": \"it-IT\",\n \"publisher\": {\n \"@type\": \"Organization\",\n \"name\": \"Fortgale\",\n \"url\": \"https:\/\/fortgale.com\/it\/\",\n \"logo\": \"https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2023\/02\/cropped-fortgale_logo.png\"\n }\n }\n <\/script>\n\n <script type=\"application\/ld+json\">\n {\n \"@context\": \"https:\/\/schema.org\",\n \"@type\": \"FAQPage\",\n \"mainEntity\": [{\n \"@type\": \"Question\",\n \"name\": \"Come vengono generati gli IOC del Feed di Intelligence Fortgale?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Il Feed di Intelligence Fortgale \u00e8 prodotto attraverso l'analisi continuativa di infrastrutture offensive condotta internamente dal team Fortgale. Il team analizza domini di phishing attivi, server C2 di malware noti (CobaltStrike, BruteRatel, Matanbuchus, Lumma Stealer e altri), campagne ransomware e kit di phishing distribuiti. Ogni IOC viene validato prima della pubblicazione per garantire alta fedelt\u00e0 e bassi falsi positivi.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Quanti indicatori produce il Feed di Intelligence Fortgale ogni settimana?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Il Feed di Intelligence Fortgale produce oltre 34.000 indicatori settimanali, distribuiti tra domini di phishing attivi, URL di phishing kit, server C2 di malware e ransomware, hash di file malevoli e indirizzi IP di infrastrutture offensive. Il volume varia in base all'attivit\u00e0 delle campagne monitorate.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Quali threat actor e malware monitorate?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Fortgale monitora oltre 200 entit\u00e0 tra threat actor e strumenti offensivi. Include i principali framework C2 (CobaltStrike, BruteRatel, Sliver, Havoc), infostealer (Lumma Stealer, RedLine, Vidar, Raccoon, MetaStealer), ransomware (LockBit, BlackCat\/ALPHV, Clop, RansomHub, Akira), loader (Matanbuchus, GuLoader, PrivateLoader, DBatLoader) e phishing kit distribuiti su Telegram e forum underground.\"\n }\n },\n {\n \"@type\": \"Question\",\n \"name\": \"Come si integra il Feed di Intelligence con i sistemi di sicurezza aziendali?\",\n \"acceptedAnswer\": {\n \"@type\": \"Answer\",\n \"text\": \"Il Feed di Intelligence Fortgale \u00e8 disponibile in formato STIX\/TAXII, JSON e CSV per l'integrazione con SIEM (Microsoft Sentinel, Splunk, IBM QRadar), EDR, firewall e piattaforme SOAR. Gli IOC vengono erogati via API con aggiornamento in tempo reale e possono essere applicati automaticamente alle regole di detection dei sistemi di sicurezza aziendali.\"\n }\n }\n ]\n }\n <\/script>\n\n <link rel=\"preconnect\" href=\"https:\/\/fonts.googleapis.com\">\n <link rel=\"preconnect\" href=\"https:\/\/fonts.gstatic.com\" crossorigin=\"\">\n <link href=\"https:\/\/fonts.googleapis.com\/css2?family=Poppins:wght@300;400;500;600;700;800&family=JetBrains+Mono:wght@400;600&display=swap\" rel=\"stylesheet\">\n\n <style>\n *,\n *::before,\n *::after {\n box-sizing: border-box;\n margin: 0;\n padding: 0;\n }\n\n :root {\n --navy: #001B3B;\n --navy-mid: #0A2250;\n --navy-btn: #303E7A;\n --navy-light: #1a2e5a;\n --white: #FFFFFF;\n --gray-light: #F2F2F2;\n --text-dark: #001B3B;\n --text-body: #2c3340;\n --text-muted: #65615f;\n --amber: #c9920a;\n --amber-light: #f5c842;\n --amber-dim: rgba(245, 200, 66, 0.55);\n --mono: 'JetBrains Mono', monospace;\n }\n\n html {\n scroll-behavior: smooth;\n }\n\n body {\n font-family: 'Poppins', sans-serif;\n color: var(--text-body);\n background: var(--white);\n line-height: 1.7;\n font-size: 16px;\n }\n\n a {\n text-decoration: none;\n color: inherit;\n }\n\n \/* \u2500\u2500\u2500 ANIMATIONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n @keyframes pulse-ring {\n 0% {\n transform: scale(.6);\n opacity: .9\n }\n 100% {\n transform: scale(2.4);\n opacity: 0\n }\n }\n\n @keyframes blink {\n 0%,\n 100% {\n opacity: 1\n }\n 50% {\n opacity: .3\n }\n }\n\n @keyframes ticker-move {\n 0% {\n transform: translateX(0)\n }\n 100% {\n transform: translateX(-50%)\n }\n }\n\n @keyframes fade-in-up {\n from {\n opacity: 0;\n transform: translateY(20px)\n }\n to {\n opacity: 1;\n transform: translateY(0)\n }\n }\n\n @keyframes glow-pulse {\n 0%,\n 100% {\n box-shadow: 0 0 20px rgba(245, 200, 66, 0.15)\n }\n 50% {\n box-shadow: 0 0 40px rgba(245, 200, 66, 0.35)\n }\n }\n\n @keyframes scan-line {\n 0% {\n top: 0\n }\n 100% {\n top: 100%\n }\n }\n\n @keyframes count-flash {\n 0%,\n 100% {\n color: var(--amber-light)\n }\n 50% {\n color: #fff\n }\n }\n\n \/* \u2500\u2500\u2500 HERO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .hero {\n background: linear-gradient(to right, rgba(0, 27, 59, 0.97) 48%, rgba(0, 27, 59, 0.65) 100%), url('https:\/\/fortgale.com\/it\/wp-content\/uploads\/sites\/9\/2026\/03\/managed-detection-and-response-mdr.png') center\/cover no-repeat;\n min-height: 100vh;\n display: flex;\n align-items: center;\n position: relative;\n overflow: hidden;\n padding-top: 40px;\n }\n\n .hero-canvas {\n position: absolute;\n inset: 0;\n pointer-events: none;\n opacity: .15;\n }\n\n .pulse-wrap {\n position: absolute;\n right: 18%;\n top: 42%;\n transform: translateY(-50%);\n pointer-events: none;\n }\n\n .pulse-core {\n width: 10px;\n height: 10px;\n background: var(--amber-light);\n border-radius: 50%;\n position: relative;\n z-index: 2;\n animation: blink 2.4s ease-in-out infinite;\n box-shadow: 0 0 12px var(--amber-light);\n }\n\n .pulse-ring {\n position: absolute;\n top: 50%;\n left: 50%;\n width: 10px;\n height: 10px;\n border-radius: 50%;\n border: 1.5px solid var(--amber-light);\n transform: translate(-50%, -50%);\n animation: pulse-ring 2.4s ease-out infinite;\n }\n\n .pulse-ring:nth-child(2) {\n animation-delay: .8s\n }\n\n .pulse-ring:nth-child(3) {\n animation-delay: 1.6s\n }\n\n \/* Live IOC terminal panel *\/\n\n .hero-terminal {\n position: absolute;\n right: 6%;\n top: 50%;\n transform: translateY(-50%);\n width: 340px;\n background: rgba(4, 13, 26, 0.95);\n border: 1px solid rgba(245, 200, 66, 0.2);\n border-radius: 10px;\n overflow: hidden;\n pointer-events: none;\n z-index: 4;\n box-shadow: 0 24px 64px rgba(0, 0, 0, 0.6);\n }\n\n .terminal-bar {\n background: rgba(255, 255, 255, 0.04);\n border-bottom: 1px solid rgba(255, 255, 255, 0.07);\n padding: 10px 16px;\n display: flex;\n align-items: center;\n gap: 8px;\n }\n\n .t-dot {\n width: 9px;\n height: 9px;\n border-radius: 50%;\n }\n\n .t-dot.r {\n background: #e53e3e\n }\n\n .t-dot.y {\n background: var(--amber-light)\n }\n\n .t-dot.g {\n background: #48bb78\n }\n\n .terminal-label {\n font-size: 10px;\n font-weight: 600;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n color: rgba(240, 246, 252, 0.4);\n margin-left: 4px;\n font-family: var(--mono);\n }\n\n .terminal-live {\n display: flex;\n align-items: center;\n gap: 6px;\n margin-left: auto;\n }\n\n .terminal-live-dot {\n width: 6px;\n height: 6px;\n border-radius: 50%;\n background: #48bb78;\n animation: blink 1.2s ease-in-out infinite;\n }\n\n .terminal-live span {\n font-size: 9px;\n font-weight: 700;\n color: #48bb78;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n font-family: var(--mono);\n }\n\n .terminal-body {\n padding: 16px;\n font-family: var(--mono);\n font-size: 11.5px;\n line-height: 1.7;\n max-height: 300px;\n overflow: hidden;\n position: relative;\n }\n\n .terminal-body::after {\n content: '';\n position: absolute;\n bottom: 0;\n left: 0;\n right: 0;\n height: 40px;\n background: linear-gradient(to bottom, transparent, rgba(4, 13, 26, 0.95));\n }\n\n .t-line {\n margin-bottom: 2px;\n }\n\n .t-time {\n color: rgba(240, 246, 252, 0.3);\n }\n\n .t-type-ph {\n color: #f687b3;\n }\n\n .t-type-c2 {\n color: #e53e3e;\n }\n\n .t-type-mal {\n color: var(--amber-light);\n }\n\n .t-type-ok {\n color: #48bb78;\n }\n\n .t-domain {\n color: rgba(240, 246, 252, 0.75);\n }\n\n .t-cursor {\n display: inline-block;\n width: 7px;\n height: 13px;\n background: var(--amber-light);\n animation: blink 1s step-end infinite;\n vertical-align: middle;\n margin-left: 2px;\n }\n\n .hero-content {\n position: relative;\n z-index: 3;\n padding: 80px 80px 120px;\n max-width: 660px;\n }\n\n .hero-tag {\n display: inline-block;\n font-size: 11px;\n font-weight: 600;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n color: var(--amber-light);\n border: 1px solid rgba(245, 200, 66, 0.35);\n padding: 5px 14px;\n border-radius: 3px;\n margin-bottom: 28px;\n }\n\n .hero h1 {\n font-size: clamp(34px, 3.8vw, 52px);\n font-weight: 800;\n color: var(--white);\n line-height: 1.13;\n margin-bottom: 24px;\n letter-spacing: -0.02em;\n }\n\n .hero h1 span {\n color: var(--amber-light);\n }\n\n .hero-subtitle {\n font-size: 17px;\n color: rgba(240, 246, 252, 0.72);\n line-height: 1.75;\n margin-bottom: 40px;\n max-width: 540px;\n }\n\n .hero-ctas {\n display: flex;\n gap: 16px;\n flex-wrap: wrap;\n }\n\n .hero-bottom {\n position: absolute;\n bottom: 36px;\n left: 80px;\n display: flex;\n gap: 48px;\n }\n\n .hero-stat-value {\n font-size: 30px;\n font-weight: 800;\n color: var(--white);\n line-height: 1;\n }\n\n .hero-stat-value.accent {\n color: var(--amber-light);\n }\n\n .hero-stat-label {\n font-size: 11px;\n font-weight: 500;\n color: rgba(240, 246, 252, 0.5);\n text-transform: uppercase;\n letter-spacing: 0.08em;\n margin-top: 4px;\n }\n\n \/* \u2500\u2500\u2500 BUTTONS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .btn-primary {\n background: var(--navy-btn);\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid var(--navy-btn);\n cursor: pointer;\n transition: all .25s;\n display: inline-block;\n }\n\n .btn-primary:hover {\n background: #253070;\n transform: translateY(-1px);\n box-shadow: 0 6px 20px rgba(0, 0, 0, .25);\n }\n\n .btn-amber {\n background: transparent;\n color: var(--amber-light);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid rgba(245, 200, 66, 0.5);\n cursor: pointer;\n transition: all .25s;\n display: inline-block;\n }\n\n .btn-amber:hover {\n border-color: var(--amber-light);\n background: rgba(245, 200, 66, 0.06);\n }\n\n .btn-amber-solid {\n background: var(--amber-light);\n color: var(--navy);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 700;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid var(--amber-light);\n cursor: pointer;\n transition: all .25s;\n display: inline-block;\n }\n\n .btn-amber-solid:hover {\n background: #e8b830;\n transform: translateY(-1px);\n box-shadow: 0 6px 24px rgba(245, 200, 66, .3);\n }\n\n .btn-secondary {\n background: transparent;\n color: var(--white);\n font-family: 'Poppins', sans-serif;\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n padding: 14px 30px;\n border-radius: 56px;\n border: 1.6px solid rgba(255, 255, 255, 0.4);\n cursor: pointer;\n transition: all .25s;\n display: inline-block;\n }\n\n .btn-secondary:hover {\n border-color: var(--white);\n background: rgba(255, 255, 255, 0.07);\n }\n\n \/* \u2500\u2500\u2500 GENERAL \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .section {\n padding: 96px 80px;\n }\n\n .section-narrow {\n max-width: 1200px;\n margin: 0 auto;\n }\n\n .section-tag {\n display: inline-block;\n font-size: 11px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--navy-btn);\n margin-bottom: 16px;\n }\n\n .section-tag-amber {\n color: var(--amber-dim);\n }\n\n .section-tag-light {\n color: rgba(245, 200, 66, 0.7);\n }\n\n .section h2 {\n font-size: clamp(26px, 2.8vw, 38px);\n font-weight: 800;\n color: var(--text-dark);\n line-height: 1.2;\n letter-spacing: -0.02em;\n margin-bottom: 20px;\n }\n\n .section-dark h2 {\n color: var(--white);\n }\n\n .section-lead {\n font-size: 17px;\n color: var(--text-muted);\n max-width: 700px;\n line-height: 1.75;\n margin-bottom: 56px;\n }\n\n .section-dark .section-lead {\n color: rgba(240, 246, 252, 0.68);\n }\n\n .section-dark {\n background: var(--navy);\n color: var(--white);\n }\n\n .section-alt {\n background: var(--gray-light);\n }\n\n .section-ink {\n background: #040d1a;\n }\n\n \/* \u2500\u2500\u2500 ANIMATED COUNTER STATS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .mega-stats {\n display: grid;\n grid-template-columns: repeat(4, 1fr);\n gap: 2px;\n margin-top: 60px;\n }\n\n .mega-stat {\n background: rgba(255, 255, 255, 0.02);\n border: 1px solid rgba(255, 255, 255, 0.07);\n padding: 48px 32px;\n text-align: center;\n position: relative;\n overflow: hidden;\n transition: background .3s;\n }\n\n .mega-stat:hover {\n background: rgba(255, 255, 255, 0.05);\n }\n\n .mega-stat::before {\n content: '';\n position: absolute;\n top: 0;\n left: 0;\n right: 0;\n height: 2px;\n background: linear-gradient(90deg, transparent, var(--amber-light), transparent);\n opacity: 0;\n transition: opacity .3s;\n }\n\n .mega-stat:hover::before {\n opacity: 1;\n }\n\n .mega-stat-value {\n font-size: clamp(44px, 4vw, 64px);\n font-weight: 800;\n color: var(--amber-light);\n line-height: 1;\n margin-bottom: 10px;\n font-variant-numeric: tabular-nums;\n display: flex;\n align-items: baseline;\n justify-content: center;\n gap: 4px;\n }\n\n .mega-stat-value .suffix {\n font-size: .55em;\n font-weight: 700;\n }\n\n .mega-stat-label {\n font-size: 12px;\n font-weight: 600;\n text-transform: uppercase;\n letter-spacing: 0.12em;\n color: rgba(240, 246, 252, 0.45);\n margin-bottom: 10px;\n }\n\n .mega-stat-desc {\n font-size: 13px;\n color: rgba(240, 246, 252, 0.52);\n line-height: 1.55;\n }\n\n .mega-stat-bar {\n height: 2px;\n background: rgba(255, 255, 255, 0.06);\n margin-top: 24px;\n border-radius: 2px;\n overflow: hidden;\n }\n\n .mega-stat-bar-fill {\n height: 100%;\n background: var(--amber-light);\n border-radius: 2px;\n width: 0;\n transition: width 1.5s ease;\n }\n\n \/* \u2500\u2500\u2500 LIVE TICKER \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .ticker-wrap {\n background: #040d1a;\n border-top: 1px solid rgba(245, 200, 66, 0.15);\n border-bottom: 1px solid rgba(245, 200, 66, 0.15);\n padding: 14px 0;\n overflow: hidden;\n position: relative;\n }\n\n .ticker-label {\n position: absolute;\n left: 0;\n top: 0;\n bottom: 0;\n z-index: 2;\n background: #040d1a;\n padding: 0 20px 0 80px;\n display: flex;\n align-items: center;\n gap: 10px;\n border-right: 1px solid rgba(245, 200, 66, 0.15);\n }\n\n .ticker-label-dot {\n width: 7px;\n height: 7px;\n border-radius: 50%;\n background: #48bb78;\n animation: blink 1.2s ease-in-out infinite;\n }\n\n .ticker-label span {\n font-size: 10px;\n font-weight: 700;\n letter-spacing: 0.2em;\n text-transform: uppercase;\n color: rgba(240, 246, 252, 0.4);\n font-family: var(--mono);\n white-space: nowrap;\n }\n\n .ticker-track {\n display: flex;\n gap: 0;\n animation: ticker-move 40s linear infinite;\n padding-left: 260px;\n }\n\n .ticker-item {\n display: inline-flex;\n align-items: center;\n gap: 8px;\n padding: 0 28px;\n font-family: var(--mono);\n font-size: 12px;\n white-space: nowrap;\n border-right: 1px solid rgba(255, 255, 255, 0.06);\n }\n\n .ti-type {\n font-size: 9px;\n font-weight: 700;\n letter-spacing: 0.15em;\n text-transform: uppercase;\n padding: 2px 7px;\n border-radius: 3px;\n }\n\n .ti-ph {\n background: rgba(246, 135, 179, 0.15);\n color: #f687b3;\n }\n\n .ti-c2 {\n background: rgba(229, 62, 62, 0.15);\n color: #e53e3e;\n }\n\n .ti-mal {\n background: rgba(245, 200, 66, 0.12);\n color: var(--amber-light);\n }\n\n .ti-rnw {\n background: rgba(159, 122, 234, 0.15);\n color: #b794f4;\n }\n\n .ti-val {\n color: rgba(240, 246, 252, 0.65);\n }\n\n \/* \u2500\u2500\u2500 CATEGORY CARDS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .cat-grid {\n display: grid;\n grid-template-columns: repeat(2, 1fr);\n gap: 24px;\n margin-top: 52px;\n }\n\n .cat-card {\n border: 1px solid rgba(0, 27, 59, 0.1);\n border-radius: 12px;\n padding: 36px;\n background: var(--white);\n position: relative;\n overflow: hidden;\n transition: box-shadow .25s, transform .25s;\n }\n\n .cat-card:hover {\n box-shadow: 0 10px 40px rgba(0, 27, 59, 0.1);\n transform: translateY(-3px);\n }\n\n .cat-card::before {\n content: '';\n position: absolute;\n top: 0;\n left: 0;\n right: 0;\n height: 3px;\n background: linear-gradient(90deg, var(--amber-light), var(--navy-btn));\n }\n\n .cat-icon {\n font-size: 32px;\n margin-bottom: 18px;\n }\n\n .cat-title {\n font-size: 19px;\n font-weight: 800;\n color: var(--text-dark);\n margin-bottom: 12px;\n }\n\n .cat-desc {\n font-size: 14px;\n color: var(--text-muted);\n line-height: 1.75;\n margin-bottom: 22px;\n }\n\n .cat-count {\n font-size: 28px;\n font-weight: 800;\n color: var(--navy-btn);\n line-height: 1;\n }\n\n .cat-count-label {\n font-size: 11px;\n color: var(--text-muted);\n text-transform: uppercase;\n letter-spacing: 0.1em;\n margin-top: 4px;\n }\n\n .cat-tags {\n display: flex;\n flex-wrap: wrap;\n gap: 6px;\n margin-top: 16px;\n }\n\n .cat-tag {\n font-size: 11px;\n font-weight: 600;\n color: var(--navy-btn);\n background: rgba(48, 62, 122, 0.07);\n padding: 4px 10px;\n border-radius: 4px;\n cursor: default;\n transition: background .2s;\n }\n\n .cat-tag:hover {\n background: rgba(48, 62, 122, 0.14);\n }\n\n \/* \u2500\u2500\u2500 THREAT ACTOR CLOUD \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .threat-cloud {\n display: flex;\n flex-wrap: wrap;\n gap: 10px;\n margin-top: 48px;\n align-items: center;\n justify-content: center;\n }\n\n .threat-tag {\n font-family: var(--mono);\n font-weight: 600;\n padding: 8px 16px;\n border-radius: 6px;\n border: 1px solid;\n cursor: default;\n transition: all .2s;\n white-space: nowrap;\n }\n\n .threat-tag:hover {\n transform: translateY(-2px);\n box-shadow: 0 4px 16px rgba(0, 0, 0, 0.3);\n }\n\n .tt-xl {\n font-size: 15px;\n }\n\n .tt-lg {\n font-size: 13px;\n }\n\n .tt-md {\n font-size: 12px;\n }\n\n .tt-sm {\n font-size: 11px;\n }\n\n \/* color variants *\/\n\n .tt-red {\n color: #fc8181;\n border-color: rgba(252, 129, 129, 0.3);\n background: rgba(252, 129, 129, 0.07);\n }\n\n .tt-red:hover {\n background: rgba(252, 129, 129, 0.15);\n }\n\n .tt-amber {\n color: var(--amber-light);\n border-color: rgba(245, 200, 66, 0.3);\n background: rgba(245, 200, 66, 0.07);\n }\n\n .tt-amber:hover {\n background: rgba(245, 200, 66, 0.15);\n }\n\n .tt-purple {\n color: #b794f4;\n border-color: rgba(183, 148, 244, 0.3);\n background: rgba(183, 148, 244, 0.07);\n }\n\n .tt-purple:hover {\n background: rgba(183, 148, 244, 0.15);\n }\n\n .tt-blue {\n color: #90cdf4;\n border-color: rgba(144, 205, 244, 0.3);\n background: rgba(144, 205, 244, 0.07);\n }\n\n .tt-blue:hover {\n background: rgba(144, 205, 244, 0.15);\n }\n\n .tt-green {\n color: #9ae6b4;\n border-color: rgba(154, 230, 180, 0.3);\n background: rgba(154, 230, 180, 0.07);\n }\n\n .tt-green:hover {\n background: rgba(154, 230, 180, 0.15);\n }\n\n .tt-pink {\n color: #f687b3;\n border-color: rgba(246, 135, 179, 0.3);\n background: rgba(246, 135, 179, 0.07);\n }\n\n .tt-pink:hover {\n background: rgba(246, 135, 179, 0.15);\n }\n\n \/* \u2500\u2500\u2500 PILLARS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .pillars {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 2px;\n margin-top: 56px;\n }\n\n .pillar {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.07);\n padding: 44px 36px;\n position: relative;\n transition: background .3s;\n }\n\n .pillar:hover {\n background: rgba(255, 255, 255, 0.06);\n }\n\n .pillar-num {\n font-size: 56px;\n font-weight: 800;\n color: rgba(245, 200, 66, 0.12);\n line-height: 1;\n margin-bottom: 20px;\n letter-spacing: -0.04em;\n }\n\n .pillar h3 {\n font-size: 18px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 14px;\n line-height: 1.3;\n }\n\n .pillar p {\n font-size: 14px;\n color: rgba(240, 246, 252, 0.62);\n line-height: 1.75;\n }\n\n .pillar-line {\n position: absolute;\n top: 0;\n left: 0;\n width: 3px;\n height: 0;\n background: var(--amber-light);\n transition: height .4s ease;\n }\n\n .pillar:hover .pillar-line {\n height: 100%;\n }\n\n \/* \u2500\u2500\u2500 INTEGRATION STRIP \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .integration-strip {\n display: flex;\n flex-wrap: wrap;\n gap: 12px;\n margin-top: 40px;\n align-items: center;\n }\n\n .integ-chip {\n display: inline-flex;\n align-items: center;\n gap: 8px;\n background: rgba(255, 255, 255, 0.04);\n border: 1px solid rgba(255, 255, 255, 0.1);\n border-radius: 6px;\n padding: 10px 20px;\n font-size: 13px;\n font-weight: 600;\n color: rgba(240, 246, 252, 0.7);\n transition: all .25s;\n }\n\n .integ-chip:hover {\n background: rgba(255, 255, 255, 0.08);\n border-color: rgba(245, 200, 66, 0.3);\n color: var(--white);\n }\n\n .integ-chip-dot {\n width: 8px;\n height: 8px;\n border-radius: 50%;\n background: var(--amber-light);\n }\n\n \/* \u2500\u2500\u2500 FORMAT CARDS \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .format-grid {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 20px;\n margin-top: 48px;\n }\n\n .format-card {\n background: rgba(255, 255, 255, 0.03);\n border: 1px solid rgba(255, 255, 255, 0.08);\n border-radius: 10px;\n padding: 28px 26px;\n transition: all .25s;\n }\n\n .format-card:hover {\n background: rgba(255, 255, 255, 0.06);\n border-color: rgba(245, 200, 66, 0.25);\n }\n\n .format-badge {\n font-family: var(--mono);\n font-size: 13px;\n font-weight: 600;\n color: var(--amber-light);\n background: rgba(245, 200, 66, 0.1);\n border: 1px solid rgba(245, 200, 66, 0.2);\n padding: 4px 12px;\n border-radius: 4px;\n display: inline-block;\n margin-bottom: 16px;\n }\n\n .format-title {\n font-size: 15px;\n font-weight: 700;\n color: var(--white);\n margin-bottom: 8px;\n }\n\n .format-desc {\n font-size: 13px;\n color: rgba(240, 246, 252, 0.55);\n line-height: 1.65;\n }\n\n \/* \u2500\u2500\u2500 FAQ \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .faq-list {\n display: flex;\n flex-direction: column;\n margin-top: 48px;\n border-top: 1px solid rgba(0, 27, 59, 0.1);\n }\n\n .faq-item {\n border-bottom: 1px solid rgba(0, 27, 59, 0.1);\n }\n\n .faq-question {\n width: 100%;\n text-align: left;\n background: none;\n border: none;\n cursor: pointer;\n padding: 24px 0;\n display: flex;\n justify-content: space-between;\n align-items: center;\n gap: 20px;\n font-family: 'Poppins', sans-serif;\n font-size: 15px;\n font-weight: 600;\n color: var(--text-dark);\n }\n\n .faq-question:hover {\n color: var(--navy-btn);\n }\n\n .faq-icon {\n flex-shrink: 0;\n width: 28px;\n height: 28px;\n border-radius: 50%;\n border: 1.5px solid var(--navy-btn);\n display: flex;\n align-items: center;\n justify-content: center;\n color: var(--navy-btn);\n font-size: 18px;\n font-weight: 300;\n transition: transform .25s;\n }\n\n .faq-item.open .faq-icon {\n transform: rotate(45deg);\n }\n\n .faq-answer {\n display: none;\n padding: 0 0 24px;\n font-size: 14.5px;\n color: var(--text-muted);\n line-height: 1.75;\n }\n\n .faq-item.open .faq-answer {\n display: block;\n }\n\n \/* \u2500\u2500\u2500 SERVICES GRID \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .services-grid {\n display: grid;\n grid-template-columns: repeat(3, 1fr);\n gap: 28px;\n margin-top: 52px;\n }\n\n .service-card {\n background: var(--white);\n border-radius: 10px;\n padding: 36px 30px;\n box-shadow: 0 2px 24px rgba(0, 27, 59, 0.07);\n border-bottom: 4px solid transparent;\n transition: border-color .25s, transform .25s, box-shadow .25s;\n }\n\n .service-card:hover {\n border-color: var(--navy-btn);\n transform: translateY(-4px);\n box-shadow: 0 8px 36px rgba(0, 27, 59, 0.13);\n }\n\n .service-card-tag {\n font-size: 10px;\n font-weight: 700;\n letter-spacing: 0.18em;\n text-transform: uppercase;\n color: var(--navy-btn);\n margin-bottom: 14px;\n }\n\n .service-card h3 {\n font-size: 18px;\n font-weight: 700;\n color: var(--text-dark);\n margin-bottom: 12px;\n line-height: 1.3;\n }\n\n .service-card p {\n font-size: 14px;\n color: var(--text-muted);\n line-height: 1.7;\n margin-bottom: 22px;\n }\n\n .service-card a {\n font-size: 12px;\n font-weight: 600;\n letter-spacing: 0.1em;\n text-transform: uppercase;\n color: var(--navy-btn);\n border-bottom: 1.5px solid var(--navy-btn);\n padding-bottom: 2px;\n transition: opacity .2s;\n }\n\n .service-card a:hover {\n opacity: .7;\n }\n\n \/* \u2500\u2500\u2500 CTA \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n .cta-section {\n background: var(--navy-mid);\n padding: 88px 80px;\n text-align: center;\n position: relative;\n overflow: hidden;\n }\n\n .cta-section::before {\n content: '';\n position: absolute;\n top: -80px;\n right: -80px;\n width: 400px;\n height: 400px;\n background: rgba(48, 62, 122, 0.4);\n border-radius: 50%;\n }\n\n .cta-section::after {\n content: '';\n position: absolute;\n bottom: -60px;\n left: -60px;\n width: 280px;\n height: 280px;\n background: rgba(48, 62, 122, 0.3);\n border-radius: 50%;\n }\n\n .cta-section>* {\n position: relative;\n z-index: 1;\n }\n\n .cta-section h2 {\n font-size: clamp(28px, 3vw, 42px);\n font-weight: 800;\n color: var(--white);\n margin-bottom: 18px;\n letter-spacing: -0.02em;\n }\n\n .cta-section p {\n font-size: 16px;\n color: rgba(240, 246, 252, 0.7);\n margin-bottom: 40px;\n max-width: 560px;\n margin-left: auto;\n margin-right: auto;\n line-height: 1.7;\n }\n\n .cta-buttons {\n display: flex;\n gap: 16px;\n justify-content: center;\n flex-wrap: wrap;\n }\n\n \/* \u2500\u2500\u2500 RESPONSIVE \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n\n @media(max-width:1024px) {\n .section {\n padding: 72px 40px\n }\n .hero-content {\n padding: 80px 40px 120px\n }\n .mega-stats {\n grid-template-columns: repeat(2, 1fr)\n }\n .cat-grid {\n grid-template-columns: 1fr\n }\n .pillars {\n grid-template-columns: 1fr;\n gap: 2px\n }\n .services-grid {\n grid-template-columns: 1fr 1fr\n }\n .format-grid {\n grid-template-columns: 1fr 1fr\n }\n .hero-terminal {\n display: none\n }\n .cta-section {\n padding: 72px 40px\n }\n }\n\n @media(max-width:768px) {\n .section {\n padding: 56px 24px\n }\n .hero-content {\n padding: 80px 24px 140px;\n max-width: 100%\n }\n .pulse-wrap {\n display: none\n }\n .mega-stats {\n grid-template-columns: 1fr 1fr\n }\n .services-grid {\n grid-template-columns: 1fr\n }\n .format-grid {\n grid-template-columns: 1fr\n }\n .cta-section {\n padding: 56px 24px\n }\n .hero-bottom {\n left: 24px;\n gap: 24px;\n bottom: 24px\n }\n .ticker-label {\n padding-left: 20px\n }\n .ticker-track {\n padding-left: 160px\n }\n }\n <\/style>\n\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 HERO \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"hero\">\n <svg class=\"hero-canvas\" viewBox=\"0 0 1440 900\" preserveAspectRatio=\"xMidYMid slice\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n <line x1=\"0\" y1=\"150\" x2=\"1440\" y2=\"150\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"300\" x2=\"1440\" y2=\"300\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"450\" x2=\"1440\" y2=\"450\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"0\" y1=\"600\" x2=\"1440\" y2=\"600\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"240\" y1=\"0\" x2=\"240\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"480\" y1=\"0\" x2=\"480\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"720\" y1=\"0\" x2=\"720\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"960\" y1=\"0\" x2=\"960\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"1200\" y1=\"0\" x2=\"1200\" y2=\"900\" stroke=\"#f5c842\" stroke-width=\"0.5\"><\/line>\n <line x1=\"860\" y1=\"200\" x2=\"1100\" y2=\"400\" stroke=\"#f5c842\" stroke-width=\"1\"><\/line>\n <line x1=\"1100\" y1=\"400\" x2=\"1050\" y2=\"580\" stroke=\"#f5c842\" stroke-width=\"1\"><\/line>\n <line x1=\"1050\" y1=\"580\" x2=\"1260\" y2=\"660\" stroke=\"#f5c842\" stroke-width=\"1\"><\/line>\n <circle cx=\"860\" cy=\"200\" r=\"4\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"1100\" cy=\"400\" r=\"4\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"1050\" cy=\"580\" r=\"3\" fill=\"#f5c842\"><\/circle>\n <circle cx=\"1260\" cy=\"660\" r=\"3\" fill=\"#f5c842\"><\/circle>\n <rect x=\"0\" y=\"0\" width=\"520\" height=\"900\" fill=\"url(#fadeLeft)\"><\/rect>\n <defs>\n <linearGradient id=\"fadeLeft\" x1=\"0\" x2=\"1\" y1=\"0\" y2=\"0\">\n <stop offset=\"0%\" stop-color=\"#001B3B\" stop-opacity=\"1\"><\/stop>\n <stop offset=\"100%\" stop-color=\"#001B3B\" stop-opacity=\"0\"><\/stop>\n <\/linearGradient>\n <\/defs>\n <\/svg>\n\n <div class=\"pulse-wrap\">\n <div class=\"pulse-core\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <div class=\"pulse-ring\"><\/div>\n <\/div>\n\n <!-- Live IOC Terminal -->\n <div class=\"hero-terminal\">\n <div class=\"terminal-bar\">\n <div class=\"t-dot r\"><\/div>\n <div class=\"t-dot y\"><\/div>\n <div class=\"t-dot g\"><\/div>\n <span class=\"terminal-label\">ioc-feed.fortgale.sh<\/span>\n <div class=\"terminal-live\">\n <div class=\"terminal-live-dot\"><\/div><span>live<\/span><\/div>\n <\/div>\n <div class=\"terminal-body\" id=\"termBody\">\n <div class=\"t-line\"><span class=\"t-time\">[08:41:02]<\/span> <span class=\"t-type-ph\">PHISHING<\/span> <span class=\"t-domain\">microsoft-verify-login[.]net<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:05]<\/span> <span class=\"t-type-c2\">C2<\/span> <span class=\"t-domain\">update-cdn-global[.]com:4444<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:09]<\/span> <span class=\"t-type-mal\">MALWARE<\/span> <span class=\"t-domain\">LummaC2 \/ panel detected<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:12]<\/span> <span class=\"t-type-ph\">PHISHING<\/span> <span class=\"t-domain\">office365-secure[.]info\/kit<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:18]<\/span> <span class=\"t-type-c2\">C2<\/span> <span class=\"t-domain\">CobaltStrike beacon @ 185.x.x.x<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:22]<\/span> <span class=\"t-type-ok\">VALID<\/span> <span class=\"t-domain\">IOC pushed \u2192 1.247 subscribers<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:27]<\/span> <span class=\"t-type-mal\">MALWARE<\/span> <span class=\"t-domain\">Matanbuchus loader \/ new hash<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:31]<\/span> <span class=\"t-type-ph\">PHISHING<\/span> <span class=\"t-domain\">google-workspace-verify[.]io<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:35]<\/span> <span class=\"t-type-c2\">C2<\/span> <span class=\"t-domain\">BruteRatel C4 \/ new implant<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:39]<\/span> <span class=\"t-type-mal\">MALWARE<\/span> <span class=\"t-domain\">RedLine Stealer drop URL<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:43]<\/span> <span class=\"t-type-ok\">VALID<\/span> <span class=\"t-domain\">IOC pushed \u2192 STIX\/TAXII feed<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:47]<\/span> <span class=\"t-type-ph\">PHISHING<\/span> <span class=\"t-domain\">paypal-secureaccount[.]net<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:51]<\/span> <span class=\"t-type-c2\">C2<\/span> <span class=\"t-domain\">Sliver \/ HTTPS listener<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:55]<\/span> <span class=\"t-type-mal\">MALWARE<\/span> <span class=\"t-domain\">Vidar Stealer \/ panel active<\/span><\/div>\n <div class=\"t-line\"><span class=\"t-time\">[08:41:58]<\/span> <span class=\"t-type-ok\">VALID<\/span> <span class=\"t-domain\">Feed aggiornato \u00b7 +47 IOC <span class=\"t-cursor\"><\/span><\/span>\n <\/div>\n <\/div>\n <\/div>\n\n <div class=\"hero-content\">\n <span class=\"hero-tag\">IOC \u00b7 Phishing \u00b7 C2 \u00b7 Malware \u00b7 Intelligence Proprietaria<\/span>\n <h1>34.000 indicatori\n <br>ogni settimana.\n <br><span>Applicabili immediatamente.<\/span><\/h1>\n <p class=\"hero-subtitle\">\n Fortgale produce il proprio Feed di Intelligence su domini di phishing, server C2, malware e ransomware \u2014 interamente prodotti e validati dal team analitico prima di ogni pubblicazione. Oltre 200 entit\u00e0 monitorate in tempo reale.\n <\/p>\n <div class=\"hero-ctas\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\">Richiedi accesso al Feed<\/a>\n <a href=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\" class=\"btn-secondary\">Scopri la CTI Fortgale \u2192<\/a>\n <\/div>\n <\/div>\n\n <div class=\"hero-bottom\">\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value accent\">34k+<\/div>\n <div class=\"hero-stat-label\">IOC prodotti\n <br>ogni settimana<\/div>\n <\/div>\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value accent\">200+<\/div>\n <div class=\"hero-stat-label\">threat actor e\n <br>strumenti monitorati<\/div>\n <\/div>\n <div class=\"hero-stat\">\n <div class=\"hero-stat-value accent\">24\/7<\/div>\n <div class=\"hero-stat-label\">aggiornamento\n <br>in tempo reale<\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 LIVE TICKER \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <div class=\"ticker-wrap\">\n <div class=\"ticker-label\">\n <div class=\"ticker-label-dot\"><\/div>\n <span>IOC Feed \u00b7 Live<\/span>\n <\/div>\n <div class=\"ticker-track\">\n <!-- Set 1 -->\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing<\/span><span class=\"ti-val\">microsoft-login-verify[.]com<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-c2\">C2<\/span><span class=\"ti-val\">CobaltStrike @ 91.xxx.xx.12:8080<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-mal\">malware<\/span><span class=\"ti-val\">Lumma Stealer \u2014 new dropper hash<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-rnw\">ransomware<\/span><span class=\"ti-val\">RansomHub \/ new encryption sample<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing kit<\/span><span class=\"ti-val\">office365-kit-v3[.]zip \/ Telegram<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-c2\">C2<\/span><span class=\"ti-val\">BruteRatel C4 \/ HTTPS implant<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-mal\">infostealer<\/span><span class=\"ti-val\">RedLine \u2014 panel @ 45.xxx.xx.77<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing<\/span><span class=\"ti-val\">google-workspace-account[.]info<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-c2\">C2<\/span><span class=\"ti-val\">Matanbuchus loader \/ new C2 host<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-rnw\">ransomware<\/span><span class=\"ti-val\">Akira \u2014 leak site update<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-mal\">malware<\/span><span class=\"ti-val\">Vidar Stealer \/ Telegram channel<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing<\/span><span class=\"ti-val\">paypal-secure-verify[.]net<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-c2\">C2<\/span><span class=\"ti-val\">Sliver \/ DNS listener detected<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-mal\">infostealer<\/span><span class=\"ti-val\">MetaStealer \u2014 new build string<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-rnw\">ransomware<\/span><span class=\"ti-val\">Clop \u2014 new victim on leak site<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing kit<\/span><span class=\"ti-val\">adobe-sign-phish-kit[.]rar<\/span><\/div>\n <!-- Set 2 (duplicate for seamless loop) -->\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing<\/span><span class=\"ti-val\">microsoft-login-verify[.]com<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-c2\">C2<\/span><span class=\"ti-val\">CobaltStrike @ 91.xxx.xx.12:8080<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-mal\">malware<\/span><span class=\"ti-val\">Lumma Stealer \u2014 new dropper hash<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-rnw\">ransomware<\/span><span class=\"ti-val\">RansomHub \/ new encryption sample<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing kit<\/span><span class=\"ti-val\">office365-kit-v3[.]zip \/ Telegram<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-c2\">C2<\/span><span class=\"ti-val\">BruteRatel C4 \/ HTTPS implant<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-mal\">infostealer<\/span><span class=\"ti-val\">RedLine \u2014 panel @ 45.xxx.xx.77<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing<\/span><span class=\"ti-val\">google-workspace-account[.]info<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-c2\">C2<\/span><span class=\"ti-val\">Matanbuchus loader \/ new C2 host<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-rnw\">ransomware<\/span><span class=\"ti-val\">Akira \u2014 leak site update<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-mal\">malware<\/span><span class=\"ti-val\">Vidar Stealer \/ Telegram channel<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing<\/span><span class=\"ti-val\">paypal-secure-verify[.]net<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-c2\">C2<\/span><span class=\"ti-val\">Sliver \/ DNS listener detected<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-mal\">infostealer<\/span><span class=\"ti-val\">MetaStealer \u2014 new build string<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-rnw\">ransomware<\/span><span class=\"ti-val\">Clop \u2014 new victim on leak site<\/span><\/div>\n <div class=\"ticker-item\"><span class=\"ti-type ti-ph\">phishing kit<\/span><span class=\"ti-val\">adobe-sign-phish-kit[.]rar<\/span><\/div>\n <\/div>\n <\/div>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 MEGA STATS \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">I numeri del feed<\/span>\n <h2>Intelligence su scala industriale.\n <br>Applicabile in tempo reale.<\/h2>\n <p class=\"section-lead\">\n Il Feed di Intelligence Fortgale non \u00e8 un aggregato di dati acquistati sul mercato. \u00c8 prodotto dal team analitico a partire dall’infrastruttura di monitoraggio proprietaria \u2014 validato, deduplicato e pubblicato con aggiornamento continuo.\n <\/p>\n <div class=\"mega-stats\">\n <div class=\"mega-stat\">\n <div class=\"mega-stat-value\"><span class=\"counter\" data-target=\"34000\" data-suffix=\"k\">0<\/span><\/div>\n <div class=\"mega-stat-label\">IOC settimanali<\/div>\n <div class=\"mega-stat-desc\">Indicatori prodotti ogni settimana tra domini di phishing, URL di C2, hash di malware e IP di infrastrutture offensive.<\/div>\n <div class=\"mega-stat-bar\">\n <div class=\"mega-stat-bar-fill\" data-width=\"95\"><\/div>\n <\/div>\n <\/div>\n <div class=\"mega-stat\">\n <div class=\"mega-stat-value\"><span class=\"counter\" data-target=\"200\" data-suffix=\"+\">0<\/span><\/div>\n <div class=\"mega-stat-label\">Entit\u00e0 monitorate<\/div>\n <div class=\"mega-stat-desc\">Threat actor, gruppi ransomware, framework C2, famiglie di malware e kit di phishing monitorati in modo continuativo.<\/div>\n <div class=\"mega-stat-bar\">\n <div class=\"mega-stat-bar-fill\" data-width=\"80\"><\/div>\n <\/div>\n <\/div>\n <div class=\"mega-stat\">\n <div class=\"mega-stat-value\"><span class=\"counter\" data-target=\"18000\" data-suffix=\"k\">0<\/span><\/div>\n <div class=\"mega-stat-label\">Domini phishing\/sett.<\/div>\n <div class=\"mega-stat-desc\">Domini di phishing identificati ogni settimana: lookalike M365, Google, Adobe, banche italiane e istituti finanziari europei.<\/div>\n <div class=\"mega-stat-bar\">\n <div class=\"mega-stat-bar-fill\" data-width=\"72\"><\/div>\n <\/div>\n <\/div>\n <div class=\"mega-stat\">\n <div class=\"mega-stat-value\"><span class=\"counter\" data-target=\"16000\" data-suffix=\"k\">0<\/span><\/div>\n <div class=\"mega-stat-label\">C2 e malware IOC\/sett.<\/div>\n <div class=\"mega-stat-desc\">Server C2, URL di distribuzione malware, hash di dropper, loader e infostealer identificati e validati ogni settimana.<\/div>\n <div class=\"mega-stat-bar\">\n <div class=\"mega-stat-bar-fill\" data-width=\"68\"><\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 CATEGORIE IOC \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section\">\n <div class=\"section-narrow\">\n <span class=\"section-tag\">Categorie di indicatori<\/span>\n <h2>Phishing, C2, Malware, Ransomware.\n <br>Ogni vettore coperto.<\/h2>\n <p class=\"section-lead\">\n Il Feed copre l’intera catena dell’attacco informatico: dall’infrastruttura di phishing usata per rubare credenziali ai server C2 usati per controllare i sistemi compromessi, fino ai campioni di malware, ransomware e infostealer distribuiti nelle campagne\n attive.\n <\/p>\n <div class=\"cat-grid\">\n <div class=\"cat-card\">\n <div class=\"cat-icon\">\ud83c\udfa3<\/div>\n <div class=\"cat-title\">Domini di Phishing e Phishing Kit<\/div>\n <p class=\"cat-desc\">Identificazione in tempo reale di domini di phishing attivi che imitano portali aziendali Microsoft 365, Google Workspace, Adobe, istituti bancari e piattaforme di pagamento. Inclusi URL di phishing kit distribuiti via Telegram\n e forum underground, con analisi dei template utilizzati per identificare campagne correlate.<\/p>\n <div class=\"cat-count counter-inline\" data-target=\"18000\">~18.000<\/div>\n <div class=\"cat-count-label\">indicatori settimanali<\/div>\n <div class=\"cat-tags\">\n <span class=\"cat-tag\">Phishing M365<\/span>\n <span class=\"cat-tag\">Phishing Google<\/span>\n <span class=\"cat-tag\">Phishing Banking<\/span>\n <span class=\"cat-tag\">Phishing Kit<\/span>\n <span class=\"cat-tag\">AiTM Infra<\/span>\n <span class=\"cat-tag\">Lookalike Domain<\/span>\n <span class=\"cat-tag\">Evilginx Template<\/span>\n <\/div>\n <\/div>\n <div class=\"cat-card\">\n <div class=\"cat-icon\">\ud83d\udce1<\/div>\n <div class=\"cat-title\">Server C2 e Infrastrutture Offensive<\/div>\n <p class=\"cat-desc\">Identificazione di server Command & Control attivi usati dai principali framework offensivi. Monitoraggio continuativo dei beacon CobaltStrike, delle istanze BruteRatel C4, dei listener Sliver e Havoc, dei server Matanbuchus\n e di ogni infrastruttura C2 identificata dalle campagne in corso. Includono IP, domini, porte e fingerprint dei listener.<\/p>\n <div class=\"cat-count counter-inline\" data-target=\"16000\">~16.000<\/div>\n <div class=\"cat-count-label\">indicatori settimanali<\/div>\n <div class=\"cat-tags\">\n <span class=\"cat-tag\">CobaltStrike<\/span>\n <span class=\"cat-tag\">BruteRatel C4<\/span>\n <span class=\"cat-tag\">Sliver<\/span>\n <span class=\"cat-tag\">Havoc Framework<\/span>\n <span class=\"cat-tag\">Matanbuchus<\/span>\n <span class=\"cat-tag\">Brute Ratel<\/span>\n <span class=\"cat-tag\">C2 IP\/Domain<\/span>\n <\/div>\n <\/div>\n <div class=\"cat-card\">\n <div class=\"cat-icon\">\ud83d\udd75\ufe0f<\/div>\n <div class=\"cat-title\">Infostealer e Malware<\/div>\n <p class=\"cat-desc\">Hash, URL di distribuzione e infrastrutture di panel per le principali famiglie di infostealer attive in Europa e Italia: Lumma Stealer, RedLine, Vidar, Raccoon, MetaStealer, RisePro e varianti. Inclusi i loader usati per la\n loro distribuzione: GuLoader, PrivateLoader, DBatLoader, Smoke Loader.<\/p>\n <div class=\"cat-tags\" style=\"margin-top:16px;\">\n <span class=\"cat-tag\">Lumma Stealer<\/span>\n <span class=\"cat-tag\">RedLine<\/span>\n <span class=\"cat-tag\">Vidar<\/span>\n <span class=\"cat-tag\">Raccoon<\/span>\n <span class=\"cat-tag\">MetaStealer<\/span>\n <span class=\"cat-tag\">RisePro<\/span>\n <span class=\"cat-tag\">GuLoader<\/span>\n <span class=\"cat-tag\">PrivateLoader<\/span>\n <\/div>\n <\/div>\n <div class=\"cat-card\">\n <div class=\"cat-icon\">\ud83d\udd10<\/div>\n <div class=\"cat-title\">Ransomware<\/div>\n <p class=\"cat-desc\">Monitoraggio delle infrastrutture ransomware attive: leak site, server di negoziazione, campioni di encryptor, affiliati identificati e infrastrutture di staging pre-deployment. Copertura dei principali gruppi attivi in Italia\n e in Europa, con alert tempestivi su nuovi victim aggiunti ai leak site.<\/p>\n <div class=\"cat-tags\" style=\"margin-top:16px;\">\n <span class=\"cat-tag\">LockBit<\/span>\n <span class=\"cat-tag\">BlackCat \/ ALPHV<\/span>\n <span class=\"cat-tag\">Clop<\/span>\n <span class=\"cat-tag\">RansomHub<\/span>\n <span class=\"cat-tag\">Akira<\/span>\n <span class=\"cat-tag\">Black Basta<\/span>\n <span class=\"cat-tag\">Play<\/span>\n <span class=\"cat-tag\">Qilin<\/span>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 THREAT CLOUD \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-ink\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">200+ entit\u00e0 monitorate<\/span>\n <h2>Threat actor, framework offensivi\n <br>e famiglie di malware sotto osservazione.<\/h2>\n <p class=\"section-lead\" style=\"color:rgba(240,246,252,0.6);\">\n Il team Fortgale monitora costantemente le infrastrutture offensive di oltre 200 entit\u00e0. Ogni nuovo campione, ogni nuovo C2, ogni dominio di phishing registrato viene analizzato, correlato e integrato nel feed prima che venga impiegato in un attacco.\n <\/p>\n <div class=\"threat-cloud\">\n <!-- Framework C2 -->\n <span class=\"threat-tag tt-red tt-xl\">CobaltStrike<\/span>\n <span class=\"threat-tag tt-red tt-lg\">BruteRatel C4<\/span>\n <span class=\"threat-tag tt-red tt-md\">Sliver<\/span>\n <span class=\"threat-tag tt-red tt-md\">Havoc<\/span>\n <span class=\"threat-tag tt-red tt-sm\">Nighthawk<\/span>\n <span class=\"threat-tag tt-red tt-sm\">Deimos<\/span>\n <!-- Infostealer -->\n <span class=\"threat-tag tt-amber tt-xl\">Lumma Stealer<\/span>\n <span class=\"threat-tag tt-amber tt-lg\">RedLine Stealer<\/span>\n <span class=\"threat-tag tt-amber tt-lg\">Vidar Stealer<\/span>\n <span class=\"threat-tag tt-amber tt-md\">Raccoon Stealer<\/span>\n <span class=\"threat-tag tt-amber tt-md\">MetaStealer<\/span>\n <span class=\"threat-tag tt-amber tt-md\">RisePro<\/span>\n <span class=\"threat-tag tt-amber tt-sm\">Stealc<\/span>\n <span class=\"threat-tag tt-amber tt-sm\">WhiteSnake<\/span>\n <!-- Loader -->\n <span class=\"threat-tag tt-blue tt-lg\">Matanbuchus<\/span>\n <span class=\"threat-tag tt-blue tt-md\">GuLoader<\/span>\n <span class=\"threat-tag tt-blue tt-md\">PrivateLoader<\/span>\n <span class=\"threat-tag tt-blue tt-md\">DBatLoader<\/span>\n <span class=\"threat-tag tt-blue tt-sm\">Smoke Loader<\/span>\n <span class=\"threat-tag tt-blue tt-sm\">PureCrypter<\/span>\n <span class=\"threat-tag tt-blue tt-sm\">IcedID<\/span>\n <!-- Ransomware -->\n <span class=\"threat-tag tt-purple tt-xl\">LockBit<\/span>\n <span class=\"threat-tag tt-purple tt-lg\">BlackCat \/ ALPHV<\/span>\n <span class=\"threat-tag tt-purple tt-lg\">RansomHub<\/span>\n <span class=\"threat-tag tt-purple tt-md\">Clop<\/span>\n <span class=\"threat-tag tt-purple tt-md\">Akira<\/span>\n <span class=\"threat-tag tt-purple tt-md\">Black Basta<\/span>\n <span class=\"threat-tag tt-purple tt-sm\">Play<\/span>\n <span class=\"threat-tag tt-purple tt-sm\">Qilin<\/span>\n <span class=\"threat-tag tt-purple tt-sm\">Medusa<\/span>\n <!-- Phishing & Banking -->\n <span class=\"threat-tag tt-pink tt-lg\">Phishing Kit M365<\/span>\n <span class=\"threat-tag tt-pink tt-md\">Evilginx<\/span>\n <span class=\"threat-tag tt-pink tt-md\">Muraena<\/span>\n <span class=\"threat-tag tt-pink tt-md\">Modlishka<\/span>\n <span class=\"threat-tag tt-pink tt-sm\">W3LL Panel<\/span>\n <span class=\"threat-tag tt-pink tt-sm\">Greatness<\/span>\n <!-- Rat \/ Backdoor -->\n <span class=\"threat-tag tt-green tt-md\">AsyncRAT<\/span>\n <span class=\"threat-tag tt-green tt-md\">Remcos<\/span>\n <span class=\"threat-tag tt-green tt-md\">NjRAT<\/span>\n <span class=\"threat-tag tt-green tt-sm\">QuasarRAT<\/span>\n <span class=\"threat-tag tt-green tt-sm\">DarkComet<\/span>\n <span class=\"threat-tag tt-green tt-sm\">XWorm<\/span>\n <span class=\"threat-tag tt-green tt-sm\">DCRat<\/span>\n <span class=\"threat-tag tt-blue tt-sm\">+ 150 altri \u2192<\/span>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 PILLARI \u00b7 CROWDSTRIKE \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">Come viene prodotto il feed<\/span>\n <h2>Intelligence interamente prodotta\n <br>e validata dal team Fortgale.<\/h2>\n <p class=\"section-lead\">\n Il Feed di Intelligence non \u00e8 un aggregato di dati acquistati. \u00c8 prodotto dall’infrastruttura di monitoraggio proprietaria Fortgale \u2014 il team analitico valida ogni IOC prima della pubblicazione, eliminando falsi positivi e garantendo alta fedelt\u00e0 operativa.\n <\/p>\n <div class=\"pillars\">\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">01<\/div>\n <h3>Monitoraggio infrastrutture offensive<\/h3>\n <p>Scansione continuativa di domini registrati di recente, certificati SSL anomali, porte aperte con fingerprint di C2 noti e repository underground per identificare infrastrutture prima che vengano impiegate in un attacco.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">02<\/div>\n <h3>Correlazione e attribuzione<\/h3>\n <p>La pipeline di analisi correla i segnali raccolti con l’intelligence proprietaria Fortgale: correlazione di IOC, enrichment contestuale e attribuzione ai threat actor monitorati per ogni indicatore prodotto.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">03<\/div>\n <h3>Validazione ad alta fedelt\u00e0<\/h3>\n <p>Ogni IOC viene validato dal team analitico prima della pubblicazione: verifica della natura malevola, deduplicazione, scoring di confidenza e contestualizzazione con la campagna o il threat actor di riferimento.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">04<\/div>\n <h3>Aggiornamento in tempo reale<\/h3>\n <p>Il feed viene aggiornato continuativamente, non a batch settimanali. Ogni nuovo IOC validato viene pubblicato immediatamente \u2014 riducendo la finestra tra l’identificazione della minaccia e la sua applicazione difensiva.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">05<\/div>\n <h3>Contestualizzazione e attribuzione<\/h3>\n <p>Ogni IOC \u00e8 arricchito con contesto: threat actor associato, campagna di riferimento, TTP MITRE ATT&CK, settori target e grado di confidenza nell’attribuzione \u2014 non solo un dominio, ma la storia che ci sta dietro.<\/p>\n <\/div>\n <div class=\"pillar\">\n <div class=\"pillar-line\"><\/div>\n <div class=\"pillar-num\">06<\/div>\n <h3>Applicazione automatica difensiva<\/h3>\n <p>Gli IOC del feed vengono applicati automaticamente alle regole di detection dei clienti SOC Fortgale. Per i clienti standalone, il feed \u00e8 disponibile via API per integrazione diretta con SIEM, EDR e firewall aziendali.<\/p>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 FORMATI E INTEGRAZIONI \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-dark\">\n <div class=\"section-narrow\">\n <span class=\"section-tag section-tag-amber\">Integrazione e formati<\/span>\n <h2>Pronto per ogni stack\n <br>di sicurezza aziendale.<\/h2>\n <p class=\"section-lead\">\n Il Feed di Intelligence Fortgale \u00e8 disponibile in tutti i formati standard per l’integrazione immediata con SIEM, EDR, firewall e piattaforme SOAR senza sviluppo personalizzato aggiuntivo.\n <\/p>\n <div class=\"format-grid\">\n <div class=\"format-card\">\n <div class=\"format-badge\">STIX \/ TAXII 2.1<\/div>\n <div class=\"format-title\">Standard OASIS per threat intelligence<\/div>\n <p class=\"format-desc\">Integrazione nativa con Microsoft Sentinel, IBM QRadar, Splunk ES, MISP e qualsiasi piattaforma compatibile con lo standard STIX\/TAXII 2.1.<\/p>\n <\/div>\n <div class=\"format-card\">\n <div class=\"format-badge\">JSON \/ REST API<\/div>\n <div class=\"format-title\">API con aggiornamento in tempo reale<\/div>\n <p class=\"format-desc\">Endpoint REST con autenticazione API key per integrazione custom, polling configurabile e webhook per notifiche push su nuovi IOC ad alta priorit\u00e0.<\/p>\n <\/div>\n <div class=\"format-card\">\n <div class=\"format-badge\">CSV \/ Flat File<\/div>\n <div class=\"format-title\">Import diretto su firewall e EDR<\/div>\n <p class=\"format-desc\">Formato CSV strutturato per import diretto su Palo Alto, Fortinet, Check Point, CrowdStrike Falcon, SentinelOne e qualsiasi EDR con blocklist configurabili.<\/p>\n <\/div>\n <\/div>\n <div class=\"integration-strip\">\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>Microsoft Sentinel<\/div>\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>Splunk ES<\/div>\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>IBM QRadar<\/div>\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>CrowdStrike Falcon<\/div>\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>SentinelOne<\/div>\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>Palo Alto XSOAR<\/div>\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>MISP<\/div>\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>Fortinet FortiSIEM<\/div>\n <div class=\"integ-chip\">\n <div class=\"integ-chip-dot\"><\/div>Check Point<\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 FAQ \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section section-alt\">\n <div class=\"section-narrow\">\n <span class=\"section-tag\">Domande frequenti<\/span>\n <h2>Tutto quello che devi\n <br>sapere sul Feed di Intelligence.<\/h2>\n <div class=\"faq-list\">\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Come vengono generati gli IOC del Feed di Intelligence Fortgale?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">Il Feed \u00e8 prodotto attraverso l’analisi continuativa di infrastrutture offensive condotta internamente dal team Fortgale. Il team analizza domini di phishing attivi, server C2 di malware noti (CobaltStrike, BruteRatel, Matanbuchus,\n Lumma Stealer e altri), campagne ransomware e kit di phishing distribuiti. Ogni IOC viene validato prima della pubblicazione per garantire alta fedelt\u00e0 e bassi falsi positivi.<\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Quanti indicatori produce il Feed di Intelligence ogni settimana?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">Il Feed produce oltre 34.000 indicatori settimanali, distribuiti tra circa 18.000 IOC di phishing (domini, URL, kit) e circa 16.000 IOC di malware e C2 (hash, IP, domini, URL di distribuzione). Il volume varia in base all’attivit\u00e0\n delle campagne monitorate \u2014 in settimane di campagne intensive il volume supera significativamente la media.<\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Quali threat actor e malware monitorate?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">Fortgale monitora oltre 200 entit\u00e0 tra threat actor e strumenti offensivi. Include i principali framework C2 (CobaltStrike, BruteRatel, Sliver, Havoc, Nighthawk), infostealer (Lumma Stealer, RedLine, Vidar, Raccoon, MetaStealer,\n RisePro, Stealc), ransomware (LockBit, BlackCat\/ALPHV, Clop, RansomHub, Akira, Black Basta, Play, Qilin), loader (Matanbuchus, GuLoader, PrivateLoader, DBatLoader, IcedID) e phishing kit distribuiti su Telegram e forum underground\n (W3LL Panel, Greatness, Evilginx template).<\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Come si integra il Feed con i sistemi di sicurezza aziendali?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">Il Feed \u00e8 disponibile in formato STIX\/TAXII 2.1, JSON via REST API e CSV per l’integrazione con SIEM (Microsoft Sentinel, Splunk, IBM QRadar), EDR (CrowdStrike Falcon, SentinelOne), firewall (Palo Alto, Fortinet, Check Point)\n e piattaforme SOAR. Gli IOC vengono erogati con aggiornamento continuo e possono essere applicati automaticamente alle regole di detection dei sistemi di sicurezza aziendali.<\/div>\n <\/div>\n <div class=\"faq-item\">\n <button class=\"faq-question\" onclick=\"toggleFaq(this)\">Il Feed \u00e8 disponibile come servizio standalone o solo con il SOC Fortgale?<span class=\"faq-icon\">+<\/span><\/button>\n <div class=\"faq-answer\">Il Feed di Intelligence \u00e8 disponibile sia come componente integrata del servizio SOC\/MDR Fortgale \u2014 nel qual caso gli IOC vengono applicati automaticamente alle regole di detection \u2014 sia come servizio standalone per aziende\n che dispongono gi\u00e0 di un team o di una piattaforma di sicurezza e vogliono arricchirla con intelligence ad alta fedelt\u00e0. Contatta il team Fortgale per valutare l’opzione pi\u00f9 adatta alla tua struttura.<\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 SERVIZI CORRELATI \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"section\">\n <div class=\"section-narrow\">\n <span class=\"section-tag\">Ecosistema Fortgale<\/span>\n <h2>Il Feed alimenta\n <br>l’intero ecosistema di difesa.<\/h2>\n <div class=\"services-grid\">\n <div class=\"service-card\">\n <div class=\"service-card-tag\">CTI \u00b7 Intelligence<\/div>\n <h3>Cyber Threat Intelligence<\/h3>\n <p>Report approfonditi su threat actor, campagne attive e malware emergenti. Advisory verticali per settore, monitoraggio dark web e briefing esecutivi per il management.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\">Scopri la CTI \u2192<\/a>\n <\/div>\n <div class=\"service-card\">\n <div class=\"service-card-tag\">SOC \u00b7 MDR<\/div>\n <h3>Managed Detection & Response<\/h3>\n <p>Il SOC Fortgale applica gli IOC del feed in tempo reale alle regole di detection. Monitoraggio 24\/7, investigazione e risposta su endpoint, rete, cloud e identit\u00e0.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/mdr-managed-detection-response\/\">Scopri l’MDR \u2192<\/a>\n <\/div>\n <div class=\"service-card\">\n <div class=\"service-card-tag\">Anti-Phishing \u00b7 AiTM<\/div>\n <h3>M365 Phishing Interceptor<\/h3>\n <p>I domini di phishing identificati dal feed alimentano l’Interceptor in tempo reale. Protezione degli utenti M365 e Google Workspace basata su intelligence aggiornata.<\/p>\n <a href=\"https:\/\/fortgale.com\/it\/protezione-phishing-aitm\/\">Scopri l’Interceptor \u2192<\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/section>\n\n\n <!-- \u2550\u2550\u2550\u2550\u2550\u2550\u2550 CTA FINALE \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 -->\n <section class=\"cta-section\">\n <span class=\"section-tag section-tag-light\" style=\"display:block;margin-bottom:16px;\">Accesso al Feed<\/span>\n <h2>34.000 indicatori la settimana scorsa.\n <br>Quanti ne hai applicati?<\/h2>\n <p>Il Feed di Intelligence Fortgale porta nel tuo stack di sicurezza l’intelligence su phishing, C2, malware, ransomware e infostealer che il tuo team non riesce a produrre internamente \u2014 validata, aggiornata in tempo reale, pronta\n all’uso.<\/p>\n <div class=\"cta-buttons\">\n <a href=\"https:\/\/fortgale.com\/it\/#contatti\" class=\"btn-amber-solid\">Richiedi accesso al Feed<\/a>\n <a href=\"https:\/\/fortgale.com\/it\/cyber-threat-intelligence\/\" class=\"btn-secondary\">Scopri la CTI Fortgale \u2192<\/a>\n <\/div>\n <\/section>\n\n <script>\n \/* \u2500\u2500 FAQ toggle \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n function toggleFaq(btn) {\n btn.closest('.faq-item').classList.toggle('open');\n }\n\n \/* \u2500\u2500 Animated counters on scroll \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n function animateCounter(el) {\n const target = parseInt(el.dataset.target, 10);\n const suffix = el.dataset.suffix || '';\n const duration = 2000;\n const steps = 60;\n const stepTime = duration \/ steps;\n let current = 0;\n const increment = target \/ steps;\n const timer = setInterval(() => {\n current += increment;\n if (current >= target) {\n current = target;\n clearInterval(timer);\n }\n const val = Math.round(current);\n if (suffix === 'k') {\n el.textContent = val >= 1000 ? (val \/ 1000).toFixed(val % 1000 === 0 ? 0 : 1) + 'k' : val;\n } else {\n el.textContent = val.toLocaleString('it-IT') + suffix;\n }\n }, stepTime);\n }\n\n \/* \u2500\u2500 Bar fill on scroll \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n function animateBar(el) {\n const width = el.dataset.width;\n el.style.width = width + '%';\n }\n\n \/* \u2500\u2500 Intersection Observer \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n const counterObserver = new IntersectionObserver((entries) => {\n entries.forEach(entry => {\n if (entry.isIntersecting && !entry.target.dataset.animated) {\n entry.target.dataset.animated = '1';\n animateCounter(entry.target);\n }\n });\n }, {\n threshold: 0.3\n });\n\n const barObserver = new IntersectionObserver((entries) => {\n entries.forEach(entry => {\n if (entry.isIntersecting && !entry.target.dataset.animated) {\n entry.target.dataset.animated = '1';\n setTimeout(() => animateBar(entry.target), 400);\n }\n });\n }, {\n threshold: 0.3\n });\n\n document.querySelectorAll('.counter').forEach(el => counterObserver.observe(el));\n document.querySelectorAll('.mega-stat-bar-fill').forEach(el => barObserver.observe(el));\n\n \/* \u2500\u2500 Terminal auto-scroll \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 *\/\n const termBody = document.getElementById('termBody');\n if (termBody) {\n setInterval(() => {\n const lines = ['[' + new Date().toTimeString().slice(0, 8) + '] <span class=\"t-type-ph\">PHISHING<\/span> <span class=\"t-domain\">new-phish-' + Math.random().toString(36).slice(2, 8) + '[.]net<\/span>',\n '[' + new Date().toTimeString().slice(0, 8) + '] <span class=\"t-type-c2\">C2<\/span> <span class=\"t-domain\">beacon @ ' + Math.floor(Math.random() * 200 + 50) + '.x.x.' + Math.floor(Math.random() * 255) + ':443<\/span>',\n '[' + new Date().toTimeString().slice(0, 8) + '] <span class=\"t-type-mal\">MALWARE<\/span> <span class=\"t-domain\">IOC pushed \u2192 feed aggiornato<\/span>'\n ];\n const div = document.createElement('div');\n div.className = 't-line';\n div.innerHTML = lines[Math.floor(Math.random() * lines.length)];\n termBody.insertBefore(div, termBody.firstChild);\n if (termBody.children.length > 20) termBody.removeChild(termBody.lastChild);\n }, 3200);\n }\n <\/script>\n\n\n\n \n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Feed di Intelligence | IOC Phishing, C2, Malware e Ransomware \u2014 Fortgale ioc-feed.fortgale.sh live [08:41:02] PHISHING microsoft-verify-login[.]net [08:41:05] C2 update-cdn-global[.]com:4444 [08:41:09] MALWARE LummaC2 \/ panel detected [08:41:12] PHISHING office365-secure[.]info\/kit [08:41:18] C2 CobaltStrike beacon @ 185.x.x.x [08:41:22] VALID IOC pushed \u2192 1.247 subscribers [08:41:27] MALWARE Matanbuchus loader \/ new hash [08:41:31] PHISHING google-workspace-verify[.]io [08:41:35] C2 BruteRatel […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-templates\/full-width-page.php","meta":{"footnotes":""},"class_list":["post-13807","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/comments?post=13807"}],"version-history":[{"count":2,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13807\/revisions"}],"predecessor-version":[{"id":13811,"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/pages\/13807\/revisions\/13811"}],"wp:attachment":[{"href":"https:\/\/fortgale.com\/it\/wp-json\/wp\/v2\/media?parent=13807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}