Ransomfeed ransomfeed
Watermark

CTI Telemetry

CARD INFO

VirusTotal Analysis

Dominio
guesty.com
Registrar
N/A
Motori AV Recap
0
Malevolo
0
Sospetto
33
Non rilevato
61
Innocuo

Acronis [harmless] clean
0xSI_f33d [undetected] unrated
Abusix [harmless] clean
ADMINUSLabs [harmless] clean
Axur [undetected] unrated
ChainPatrol [undetected] unrated
Criminal IP [harmless] clean
AILabs (MONITORAPP) [harmless] clean
AlienVault [harmless] clean
alphaMountain.ai [harmless] clean
AlphaSOC [undetected] unrated
Antiy-AVL [harmless] clean
ArcSight Threat Intelligence [undetected] unrated
AutoShun [undetected] unrated
benkow.cc [harmless] clean
Bfore.Ai PreCrime [undetected] unrated
BitDefender [harmless] clean
Bkav [undetected] unrated
Blueliv [harmless] clean
Certego [harmless] clean
Chong Lua Dao [undetected] unrated
CINS Army [harmless] clean
Cluster25 [undetected] unrated
CRDF [harmless] clean
CSIS Security Group [undetected] unrated
Snort IP sample list [undetected] unrated
CMC Threat Intelligence [harmless] clean
CTX AI [undetected] unrated
Cyan [undetected] unrated
Cyble [harmless] clean
CyRadar [harmless] clean
DNS8 [harmless] clean
Dr.Web [harmless] clean
Ermes [undetected] unrated
ESET [harmless] clean
ESTsecurity [harmless] clean
EmergingThreats [harmless] clean
Emsisoft [harmless] clean
Forcepoint ThreatSeeker [harmless] clean
Fortinet [harmless] clean
G-Data [harmless] clean
GCP Abuse Intelligence [undetected] unrated
Google Safebrowsing [harmless] clean
GreenSnow [harmless] clean
GreyNoise [undetected] unrated
Gridinsoft [undetected] unrated
Guardpot [undetected] unrated
Heimdal Security [harmless] clean
Hunt.io Intelligence [undetected] unrated
IPsum [harmless] clean
Juniper Networks [harmless] clean
Kaspersky [harmless] clean
LevelBlue [harmless] clean
Lionic [harmless] clean
Lumu [undetected] unrated
MalwarePatrol [harmless] clean
MalwareURL [undetected] unrated
Malwared [harmless] clean
Mimecast [undetected] unrated
Netcraft [undetected] unrated
OpenPhish [harmless] clean
Phishing Database [harmless] clean
PhishFort [undetected] unrated
PhishLabs [undetected] unrated
Phishtank [harmless] clean
PREBYTES [harmless] clean
PrecisionSec [undetected] unrated
Quick Heal [harmless] clean
Quttera [harmless] clean
SafeToOpen [undetected] unrated
Sansec eComscan [undetected] unrated
Scantitan [harmless] clean
SCUMWARE.org [harmless] clean
Seclookup [harmless] clean
SecureBrain [undetected] unrated
SOCRadar [undetected] unrated
Sophos [harmless] clean
Spam404 [harmless] clean
StopForumSpam [harmless] clean
Sucuri SiteCheck [harmless] clean
ThreatHive [harmless] clean
URLhaus [harmless] clean
URLQuery [harmless] clean
Viettel Threat Intelligence [harmless] clean
VIPRE [undetected] unrated
VX Vault [harmless] clean
ViriBack [harmless] clean
Webroot [harmless] clean
Yandex Safebrowsing [harmless] clean
ZeroCERT [harmless] clean
desenmascara.me [harmless] clean
securolytics [harmless] clean
Xcitium Verdict Cloud [harmless] clean
ZeroFox [undetected] unrated

0xSI_f33d undetected (unrated)
Axur undetected (unrated)
ChainPatrol undetected (unrated)
AlphaSOC undetected (unrated)
ArcSight Threat Intelligence undetected (unrated)
AutoShun undetected (unrated)
Bfore.Ai PreCrime undetected (unrated)
Bkav undetected (unrated)
Chong Lua Dao undetected (unrated)
Cluster25 undetected (unrated)
CSIS Security Group undetected (unrated)
Snort IP sample list undetected (unrated)
CTX AI undetected (unrated)
Cyan undetected (unrated)
Ermes undetected (unrated)
GCP Abuse Intelligence undetected (unrated)
GreyNoise undetected (unrated)
Gridinsoft undetected (unrated)
Guardpot undetected (unrated)
Hunt.io Intelligence undetected (unrated)
Lumu undetected (unrated)
MalwareURL undetected (unrated)
Mimecast undetected (unrated)
Netcraft undetected (unrated)
PhishFort undetected (unrated)
PhishLabs undetected (unrated)
PrecisionSec undetected (unrated)
SafeToOpen undetected (unrated)
Sansec eComscan undetected (unrated)
SecureBrain undetected (unrated)
SOCRadar undetected (unrated)
VIPRE undetected (unrated)
ZeroFox undetected (unrated)

TXT google-site-verification=HHtDnGSyvhI4XHIIo0DbxJoJKZEt2swDvUVQ6TbeYX8
TXT miro-verification=b62af21c77238215ab627a8b4914501d13005728
MX alt3.aspmx.l.google.com
TXT google-site-verification=q4uvG63gGYbngxx66-3BChvZlYJUmWq8kfKZCXoBov8
TXT v=verifydomain MS=3266658
TXT apple-domain-verification=Smcms3NUhYxyJDlN
TXT loom-verification=6448709232
MX alt1.aspmx.l.google.com
TXT MS=ms32467218
A 18.119.66.126
TXT v=spf1 include:2f4v9wle8.spf.checkpoint-spf.com include:docebosaas.com a:zgateway.zuora.com ~all
NS ns-1469.awsdns-55.org
NS ns-874.awsdns-45.net
NS ns-1915.awsdns-47.co.uk
TXT _globalsign-domain-verification=l8maMumukHEsf48zQDRNXnT0mI_RmaTEmx6FylNwu_
SOA ns-125.awsdns-15.com
TXT globalsign-domain-verification=fjJGuQ9iIL4t6JHF79Rpl4aWkus2YqoRARudIKwp76
A 3.23.90.2
TXT notion-domain-verification=DvD6esbkNiknFweqGn3tAizJopZHQpR0GCFren6R66Y
TXT MS=ms32796061
TXT google-site-verification=KJGYwyUYhb43t7RCMTdF7yVy6gys3hrnXoRqeyij6Uk
TXT atlassian-domain-verification=cuzcsbAWK9F7UKX+KOu7VQDe2N51/yRV2luaJGVvaU1xqiIngWR2oldErLCdnwv+
TXT airtable-verification=776fcce162c1ae59a56557bb3b9f6eb8
TXT ps-cd-verification=8930f444-c365-450d-ac13-ccfc7e9e96b1
TXT loom-site-verification=e3925d0272ad4094bd85acc5797c103b
TXT MS=ms79940939
TXT cursor-domain-verification-35crq9=7gnjNgKRq46PaCvRPUCV7TjO7
TXT docker-verification=a4399279-a9f6-4c01-a84e-efb52730281b
TXT brevo-code:c76be20f9afc1fb660ee501c2e59b5bc
TXT google-site-verification=iHHM4Qt5sLzxH-BZSrDZB8H42nYY_47Ue3NgvBif93Q
MX aspmx.l.google.com
A 18.225.42.194
TXT mongodb-site-verification=j7cYagXVe24HtIcSUPKS1AcqWyFCrG36
MX alt2.aspmx.l.google.com
MX alt4.aspmx.l.google.com
TXT google-site-verification=5Tv2SPkPzxtt3mlfEjANEW-p5N3g89iY6mLDkqYaWMw
TXT airalo-domain-verification=CARam0uDz80V0q7
NS ns-125.awsdns-15.com
TXT make-domain-verification=ab1001ef-d437-4003-949c-29afd2e860eb

Emesso da:
Amazon RSA 2048 M02
Intestato a:
guesty.com
Valido dal:
2025-05-19 00:00:00
Valido fino al:
2026-06-17 23:59:59

Infostealer analysis by HudsonRock

626
🧠 Dispositivi infetti
564
🌐 Utenti compromessi
62
🧑‍💼 Dipendenti compromessi
14
🔑 Password aziendali
1131
🔑 Password users

StealC 36
Mystic 1
UNKNOWN 1
Azorult 12
Vidar 17
RedLine 160
Raccoon 21
Lumma 133
Generic Stealer 159
Acreed 11

https://app.guesty.com/auth/login 60
https://hq.guesty.com/auth/login 56
https://login.guesty.com 1
https://bi-prod.guesty.com/app/account 1
https://app.guesty.com/legacy/account/integrations/rentals-united/5cae145808b7bc0021abb548 1
https://******.**********.guesty.com 1
https://******.**********.guesty.com/*******/************/****** 1

https://app.guesty.com/auth/login 986
https://hosts.guesty.com/start/form 54
https://app.guesty.com 50
https://login.guesty.com 48
https://login.guesty.com/oauth2/aus2jlqfuwAsNNp3D5d7/v1/authorize 34
https://***.guesty.com/***** 27
https://*****.guesty.com/***** 27
https://***.guesty.com/******/ 16
https://***.guesty.com/******/*****/*** 15
https://******.**********.guesty.com/*****/*** 13
https://**.guesty.com 8
https://**.guesty.com/****/***** 7
https://***.guesty.com/****/***** 6
https://***.guesty.com/ 5
https://******.**********.guesty.com/*******/************/****** 5
https://***.guesty.com/****** 5
https://******.**********.guesty.com 5
*******//*****.guesty.com/*****/****** 5
https://***.guesty.com/************ 4
https://***.guesty.com/ 2
https://******.**********.guesty.com/*******/************/******/************************ 2
https://******.**********.guesty.com/*******/************/******/************************ 2
https://***********.guesty.com/****/***** 2
https://******.**********.guesty.com/******** 2
https://******.**********.guesty.com/*******/************/******/************************ 2
https://*****.guesty.com 2
https://************.guesty.com/****/***** 2
https://***.guesty.com/***********/*********/************************ 2
https://************.guesty.com/****/***** 2
https://******.**********.guesty.com/*******/************/******/************************ 1
https://******.**********.guesty.com/*******/************/******/************************ 1
https://******.**********.guesty.com/*******/************/******/************************ 1
https://******.**********.guesty.com/*******/************/******/************************ 1
https://***.guesty.com 1
https://***.guesty.com/****** 1
https://******.**********.guesty.com/*****/************************ 1
https://*****.guesty.com/******/**/********* 1

Not Found 3
N/A 1
McAfee, Windows Defender 1
Windows Defender 2