It was reported that naturalfreshmall.com was hosting a defrayal skimmer. This website allegedly was loading naturalfreshmall.com assets at the time of compromise as reported by https://publicwww.com with the cipher snippet https://www.arican.com.br/ferramentas-manuais/alicate.html;3448421;cript src=https://naturalfreshmall.com/image/pixel.js>