Ransomfeed

CTI Telemetry

CARD INFO

VirusTotal Analysis

Dominio

spglobal.com

Registrar

N/A

Motori AV Recap

Malevolo

Sospetto

Non rilevato

Innocuo

Acronis [harmless] clean

0xSI_f33d [undetected] unrated

Abusix [harmless] clean

ADMINUSLabs [harmless] clean

Axur [undetected] unrated

ChainPatrol [undetected] unrated

Criminal IP [harmless] clean

AILabs (MONITORAPP) [harmless] clean

AlienVault [harmless] clean

alphaMountain.ai [harmless] clean

AlphaSOC [undetected] unrated

Antiy-AVL [harmless] clean

ArcSight Threat Intelligence [undetected] unrated

AutoShun [undetected] unrated

benkow.cc [harmless] clean

Bfore.Ai PreCrime [undetected] unrated

BitDefender [harmless] clean

Bkav [undetected] unrated

Blueliv [harmless] clean

Certego [harmless] clean

Chong Lua Dao [harmless] clean

CINS Army [harmless] clean

Cluster25 [undetected] unrated

CRDF [harmless] clean

CSIS Security Group [undetected] unrated

Snort IP sample list [undetected] unrated

CMC Threat Intelligence [harmless] clean

CTX AI [undetected] unrated

Cyan [undetected] unrated

Cyble [harmless] clean

CyRadar [harmless] clean

DNS8 [harmless] clean

Dr.Web [harmless] clean

Ermes [undetected] unrated

ESET [harmless] clean

ESTsecurity [harmless] clean

EmergingThreats [harmless] clean

Emsisoft [harmless] clean

Forcepoint ThreatSeeker [harmless] clean

Fortinet [harmless] clean

G-Data [harmless] clean

GCP Abuse Intelligence [undetected] unrated

Google Safebrowsing [harmless] clean

GreenSnow [harmless] clean

GreyNoise [undetected] unrated

Gridinsoft [undetected] unrated

Guardpot [undetected] unrated

Heimdal Security [harmless] clean

Hunt.io Intelligence [undetected] unrated

IPsum [harmless] clean

Juniper Networks [harmless] clean

Kaspersky [harmless] clean

LevelBlue [harmless] clean

Lionic [harmless] clean

Lumu [undetected] unrated

MalwarePatrol [harmless] clean

MalwareURL [undetected] unrated

Malwared [harmless] clean

Mimecast [undetected] unrated

Netcraft [undetected] unrated

OpenPhish [harmless] clean

Phishing Database [harmless] clean

PhishFort [undetected] unrated

PhishLabs [undetected] unrated

Phishtank [harmless] clean

PREBYTES [harmless] clean

PrecisionSec [undetected] unrated

Quick Heal [harmless] clean

Quttera [harmless] clean

SafeToOpen [undetected] unrated

Sansec eComscan [undetected] unrated

Scantitan [harmless] clean

SCUMWARE.org [harmless] clean

Seclookup [harmless] clean

SecureBrain [undetected] unrated

SOCRadar [undetected] unrated

Sophos [harmless] clean

Spam404 [harmless] clean

StopForumSpam [harmless] clean

Sucuri SiteCheck [harmless] clean

ThreatHive [harmless] clean

URLhaus [harmless] clean

URLQuery [harmless] clean

Viettel Threat Intelligence [harmless] clean

VIPRE [undetected] unrated

VX Vault [harmless] clean

ViriBack [harmless] clean

Webroot [harmless] clean

Yandex Safebrowsing [harmless] clean

ZeroCERT [harmless] clean

desenmascara.me [harmless] clean

securolytics [harmless] clean

Xcitium Verdict Cloud [harmless] clean

ZeroFox [undetected] unrated

0xSI_f33d undetected (unrated)

Axur undetected (unrated)

ChainPatrol undetected (unrated)

AlphaSOC undetected (unrated)

ArcSight Threat Intelligence undetected (unrated)

AutoShun undetected (unrated)

Bfore.Ai PreCrime undetected (unrated)

Bkav undetected (unrated)

Cluster25 undetected (unrated)

CSIS Security Group undetected (unrated)

Snort IP sample list undetected (unrated)

CTX AI undetected (unrated)

Cyan undetected (unrated)

Ermes undetected (unrated)

GCP Abuse Intelligence undetected (unrated)

GreyNoise undetected (unrated)

Gridinsoft undetected (unrated)

Guardpot undetected (unrated)

Hunt.io Intelligence undetected (unrated)

Lumu undetected (unrated)

MalwareURL undetected (unrated)

Mimecast undetected (unrated)

Netcraft undetected (unrated)

PhishFort undetected (unrated)

PhishLabs undetected (unrated)

PrecisionSec undetected (unrated)

SafeToOpen undetected (unrated)

Sansec eComscan undetected (unrated)

SecureBrain undetected (unrated)

SOCRadar undetected (unrated)

VIPRE undetected (unrated)

ZeroFox undetected (unrated)

TXT infoblox-domain-mastery=448a574f0b33ca44e970c1858e0a5cb6d9a6efdc8140a44a6cbd414782e011d7b4

TXT adobe-idp-site-verification=32e6a19cbac0aaa1bf1282828160983e0161508d610d9e8cd3413476fc850e4d

TXT ece513f8bb4ec122623bc60978a523dfaab13fceee53736616965c675562d2a0

TXT yahoo-verification-key=IHEiiM2t2G9Ap8Z4/SgwDzofdFLYaHD8JRL88NqyJH4=

TXT intersight=ece513f8bb4ec122623bc60978a523dfaab13fceee53736616965c675562d2a0

TXT atlassian-domain-verification=r3JgisYgfjhPzBLra6EggpnSBp7L2q8gpd/riLyo6uB3JgZR2dwueUQUcCMriajA

TXT atlassian-domain-verification=Ko/7kQrTuxBu0Lj6zQjlHnkDv8HYstdGmcs/66ddYS7qp4zlxnjlzZva0jj2IipM

NS a12-67.akam.net

TXT pendo-domain-verification=N3UrsyVRibmYwBIh1KZhTsduX8U

NS a14-64.akam.net

TXT sending_domain989632=42df4b634431521ba7f1866ab401ad5db1ff68fca26108c971b50cac6b7938a3

SOA nsuse01.spglobal.com

NS a18-67.akam.net

TXT cursor-domain-verification-cm20wn=Va8rsxcPcTPPTo6ypWkIWcOAK

TXT adobe-idp-site-verification=2bc320369e66ce417ef3dd3de88c68d1b0946998b6655ea65e0921625c10458a

TXT aliyun-site-verification=2065e344-0356-4065-9388-7035ebeef6c3

TXT pardot892491=e59cd2a2eee2e0a316fd934c1861961f9e1fbd8f7c089a262f58e759f99002c9

TXT cisco-ci-domain-verification=4f24f6046415feba24466bad602439302627d2991becfe7ee694199f8254a04c

TXT e2ma-verification=qk1fb

TXT miro-verification=147f64f22fa1a97df76f47224f8c5d93cbb84f2c

TXT cloudhealth=949c8507-5fc3-45f7-b509-dba6ca56e47b

A 20.190.249.200

TXT atlassian-domain-verification=mwQLqIeWHm2hKqlDUZAGfpCEurAQS3pzobvCrt0nUR8/pAqFC/oo46veYShwHG/c

TXT pexip-ms-tenant-domain-verification=ff9191d6-ff13-4a89-a059-def01c15d296

NS a7-64.akam.net

TXT

v=spf1 ip4:148.163.148.100 ip4:148.163.152.37 ip4:204.8.130.0/26 ip4:168.116.34.0/26 ip4:199.30.235.176 ip4:74.203.185.176 ip4:207.126.120.0/24 ip4:167.89.16.99 include:spf1.spglobal.com include:spf2.spglobal.com include:spf3.spglobal.com -all

TXT google-site-verification=D5PYYTnmaO2remKusJrfvV6TY8JuxKHZ-WEjTis4H2A

TXT zoho-verification=zb62038945.zmverify.zoho.com

TXT amazonses:CrSRW1r5FkJJfD8bu25hoZ3H4iU4FWBE5DHGNG5FMRE=

TXT docker-verification=a3cb7f08-7162-4383-b121-666df292a986

TXT 5Zv4csO7SYFrGobEug9zQyMbm9vD3msqkhk5r2RizYcPpRC1iIh7BCx5Ust4nBq/Cr5xmqera803+a5ittmCHQ==

TXT google-site-verification=D_tULu7pbV8xis-ur3qx-xqZuvNSql0bjHPFldKNxWU

TXT brevo-code:5d58621877b999d1f55e58641668e385

TXT atlassian-domain-verification=1KXvLNzt/HSUc6gun2e7YGOeMc0aHKpGtpNkhzleZSaGFM0Y6jD9o9pJ7ahpo28w

NS a1-134.akam.net

TXT aliyun-site-verification=ca6c4b65-de53-4a2f-bb66-0896ca4e070a

TXT shopify-verification-code=KV5mNR05JdQfIAD2I4ZQGZL6Q8i5rf

TXT airtable-verification=061d9401d7d237e02773f8ea0d864225

TXT onetrust-domain-verification=2daa7b87e3864b7d88d55893a361c4ba

TXT MS=ms63434478

TXT PRMNFcUV4ui3Tm3J-k8v

TXT aliyun-site-verification=ec998802-b69f-4ddd-9c64-781f31b9cd22

TXT brevo-code:7421957d3c5a23ead96b4e40cde7f5bf

MX mxa-0032c001.gslb.pphosted.com

TXT EE6jzbyR_w-ASC4pC5id

TXT aliyun-site-verification=fe4daab8-13bd-4ac9-b6dc-24adf7beb95a

TXT db7o3fksry4lw.cloudfront.net

TXT google-site-verification=_t_yFbcgeuqO_CrKwiFfCGinAd0pC6QwhV9Cc4Z75Ck

TXT google-site-verification=MTFB1yPZ6Jt2bTquWoLoDCPD425suyn2Uqq3ndGj_1s

TXT MS=ms65563480

TXT yMwK1h05IkDA3nvHLIJc/lQoc4xNe9QUNmCvfV7aNZA=

TXT google-site-verification=7jzXyy460kI2kfWxHXIuJqMCzskw-9hzh2ERwQExZf8

TXT aliyun-site-verification=c7d50a66-a55b-40ea-977d-dcc17d7171da

TXT aliyun-site-verification=3005cfd9-28c9-4d8e-98c1-72d0f9a9906d

TXT neat-pulse-domain-verification-1vBDllM=9c21ded0-c01f-4f56-982b-8c0e0f502249

TXT anthropic-domain-verification-518w0x=55BVbatHFIINbExajmJlHLeKv

TXT _hh898dpckm58ox7h0bw0qpwhla2zjg4

TXT amazonses:s1ybIXu5VAbPu7uaJG7Ay6LGb2klmHlbNrKA+qkL5io=

TXT dbb422937d7ff56e049d61da730b3e11

TXT status-page-domain-verification=nn6vpm1r7vs8

TXT asv=459f9f930252dc61a466a9ccdb7828f2

TXT pardot910432=8827164fef0cc11d6d746476c0ce8d98bd39137f4a148fb3dfdafff408e6e982

TXT pendo-domain-verification=Hb-63hTahYsq9D4yrGfjq9Rwpa8

TXT DirectFedAuthUrl=https://spglobal.okta.com/app/spglobal_pwcdac6smartreportingtool_1/exkr7gbzdkgkX8Gp85d7/sso/saml

TXT amazonses:hjkf8iCvlG6M5vzfQS6knu9rEgWY7iENH58oxn71fMg=

NS a5-66.akam.net

TXT airtable-verification=cb2119bb1c925674362e1bb9d971e544

TXT atlassian-domain-verification=bk4wc1r-AN1NOe7oTzqyf+e656EwR0lM9bGOwyEpj/GkZbrb64Af7X5ZHk35/jJo

TXT https://spglobal.okta.com/app/exkr7gbzdkgkX8Gp85d7/sso/saml/metadata

TXT cursor-domain-verification-5gcgdr=GvcGsCRycRbRTEOjynFV8JmA7

TXT aliyun-site-verification=4e18a98c-d56b-4566-8119-6d8408dcbb22

TXT atlassian-domain-verification=NzXzg26UWjNJ/KJ15uo0dPfDczVpriU3VE1qd9lMUIFDFqpS0F9ad42VA5aQzQje

MX mxb-0032c001.gslb.pphosted.com

TXT docusign=8713107b-33b4-495b-b065-f739671c546f

TXT windsurf-verification=Ho5e-MxquwvJqFsmeYPkKFHjL4G-duj4QKLAeJtVgLE=

TXT docusign=3046a212-0cea-434b-a152-ec30c5f00c13

Emesso da:
DigiCert Global G2 TLS RSA SHA256 2020 CA1

Intestato a:
spglobal.com

Valido dal:
2025-09-17 00:00:00

Valido fino al:
2026-09-16 23:59:59

Infostealer analysis by HudsonRock

2281

🧠 Dispositivi infetti

2143

🌐 Utenti compromessi

138

🧑‍💼 Dipendenti compromessi

162

🔑 Password aziendali

868

🔑 Password users

Lumma 552

Ficker 1

Atomic 6

Raccoon 175

Azorult 11

Taurus 1

UNKNOWN 21

Mystic 5

RedLine 622

CRYPTBOT 3

Vidar 51

Generic Stealer 469

Acreed 14

StealC 136

https://fs.spglobal.com/adfs/ls 86

https://fs.spglobal.com 72

https://fs.spglobal.com/adfs/ls/ 44

https://platform.spgi.spglobal.com/web/client 35

https://login.spglobal.com/oam/server/obrareq.cgi 27

https://********.******************.spglobal.com/***/****** 18

https://***.spglobal.com/***/****/*****.**** 17

https://**.spglobal.com/ 12

https://***.spglobal.com/******/***/*********** 10

https://***.****.spglobal.com/******/***/*********** 10

https://********.*******.spglobal.com/***/***** 8

https://********.****.spglobal.com/***/***** 8

https://*****.spglobal.com/******/***/******* 7

https://*******.spglobal.com/*******/*****.**** 6

https://********.*******.spglobal.com/***/***** 6

https://***.spglobal.com/****** 6

https://**.spglobal.com/**/***/********/******/************************.** 5

https://***.***********.spglobal.com/***.********.***********.******.*******/**/****** 5

https://********.**.spglobal.com/***/****** 4

https://*****.spglobal.com 4

https://*****.spglobal.com/***/******/**************** 3

https://********.*******.spglobal.com/***/****** 3

https://***.spglobal.com/******/ 3

https://*********.spglobal.com/*******/*****.**** 3

https://**********.spglobal.com 3

https://*********.spglobal.com/*******/******.**** 3

https://**********.spglobal.com 3

https://***.******.spglobal.com/***/***** 2

https://**.spglobal.com/**/***/********/******/*************.** 2

https://********.**.spglobal.com/************/*************.**** 2

https://******.****.spglobal.com/******* 2

https://********.********.spglobal.com/***/****** 2

https://********.****.spglobal.com 2

https://***.************.spglobal.com/***/****** 2

https://***.spglobal.com/******/*****.**** 2

https://**.spglobal.com/**/***/********/******/************************.** 1

https://********.******************.spglobal.com 1

https://********.******************.spglobal.com/ 1

https://********.**.spglobal.com 1

https://********.**.spglobal.com/ 1

https://********.********.spglobal.com/ 1

https://********.********.spglobal.com 1

https://********.**********.spglobal.com 1

https://********.**********.spglobal.com/ 1

https://********.****.spglobal.com/ 1

https://********.*******.spglobal.com 1

https://********.*******.spglobal.com/ 1

https://********.*******.spglobal.com 1

https://********.*******.spglobal.com/***/***** 1

https://***.spglobal.com/***/ 1

https://***.spglobal.com/***/****/***/*******/*****/***/****/ 1

https://***.***************.spglobal.com 1

http://*********.spglobal.com 1

https://***.spglobal.com/*** 1

https://*******.spglobal.com*****/*************/***********.****** 1

http://*********.******************.spglobal.com*****/***** 1

https://**.spglobal.com/**/***/********/******/*************.** 1

https://***.spglobal.com/***/******/*******.*** 1

https://********.*******.spglobal.com/***/****** 1

https://***.************.spglobal.com/***.********.***********.******.*******/**/******/******* 1

https://***.spglobal.com/***/****/***/*******/*****/***/**** 1

http://**********************.*******************.*********.spglobal.com/***** 1

https://*****************.******************.spglobal.com*****/***** 1

https://***.*********.spglobal.com/***/************ 1

https://login.spglobal.com/oam/server/obrareq.cgi 579

https://www.spglobal.com/ratings/en/register 377

https://secure.signin.spglobal.com/oauth2/spglobal/v1/authorize 327

https://id.spglobal.com/SP/idm/idmlogin/public/resetPassword.do 311

https://platform.spgi.spglobal.com/web/client 293

https://***.spglobal.com/*****************/**/******** 212

https://********.****.spglobal.com/***/***** 196

https://*****.spglobal.com/***/******/**************** 129

https://***.spglobal.com/******/**/******** 108

https://***.spglobal.com/******/** 106

https://***.spglobal.com 102

https://**.spglobal.com/**/***/********/******/*************.** 85

https://***.*********.spglobal.com/***/***** 69

https://*****.spglobal.com/******/***/******* 66

https://*****.spglobal.com 62

https://**.spglobal.com/**/***/********/******/************************.** 61

https://**.spglobal.com 57

https://***.*********.spglobal.com/***/****** 50

https://******.******.spglobal.com/***/**********************/********************/***/**** 47

https://********.****.spglobal.com 44

https://********.******************.spglobal.com/***/****** 42

https://***.spglobal.com/***/******/**************** 35

https://***.spglobal.com/*****.**** 34

https://***.spglobal.com/******************/**/******** 29

https://********.**.spglobal.com/***/****** 28

https://***.spglobal.com/******/**/***/****************/******* 26

https://******.******.spglobal.com 26

https://***.*********.spglobal.com/***/************ 24

https://***.spglobal.com/******/**/***************/***********/**************/******************************************************************

https://***.spglobal.com/*****/** 18

https://***.spglobal.com/***/******/*******.*** 17

https://***.************.spglobal.com/******************/**************/********.**** 17

https://**.spglobal.com/**/***/********/******/************************.** 14

https://***.spglobal.com/*****************/**/******** 13

https://**.*****.spglobal.com/**/** 13

https://***.spglobal.com/******/**/******** 12

https://********.******.spglobal.com/***/****** 12

https://******.****.spglobal.com/******* 11

https://***.spglobal.com/******/**/***************/*********** 11

https://***.spglobal.com 11

https://***.spglobal.com/******/**/***************/******/***************/*******************************************************

https://******.******.spglobal.com/******/**/********* 11

https://******.***.spglobal.com/****** 10

https://***.***********.spglobal.com/***.********.***********.******.*******/**/****** 9

https://***.***********.spglobal.com/***.********.***********.******.*******/**/***** 9

https://***.spglobal.com/******/***/******* 8

https://********************.****.spglobal.com/***********/****** 8

https://***.spglobal.com/******/**/***************/*****************/***/************************************** 7

https://***.spglobal.com/*******/**/********.**** 7

https://***.spglobal.com/******/**/*****************/****/**************** 7

https://********.*******.spglobal.com/***/****** 7

https://***.spglobal.com/******/**/***************/********/***/*****************************************************************

https://***.spglobal.com/******/**/***************/***********/**************/*************************************************************

https://***.spglobal.com/******/**/***************/********/*****/**************************************** 7

https://***.spglobal.com/******/**/******/********/************ 7

https://*****.spglobal.com/******/***/*********** 6

https://********.*******.spglobal.com/***/****** 6

https://***.spglobal.com/******/**/***************/***********/**************/******************************************************************************

https://***.spglobal.com/******/**/*****************/************* 6

https://***.spglobal.com/******/**/***************/*****************/***/******************************************** 6

https://*****.***.spglobal.com/***/******/*******.*** 6

https://***.spglobal.com/******/**/*****************/**************/******** 6

https://**********.spglobal.com 6

https://******.***.spglobal.com/******/ 5

https://***.spglobal.com/ 5

https://***.spglobal.com/****** 5

http://*********.spglobal.com 5

https://*********.spglobal.com 5

https://***.spglobal.com/****** 5

https://***.******.spglobal.com/***/***** 5

https://*******.spglobal.com/******* 5

https://***.*********.spglobal.com 5

https://***.spglobal.com/*****/**/*******/******/******************************************************* 5

https://***.spglobal.com/******/**/***************/***********/***/**********************************************************************

https://*********.spglobal.com/ 4

https://***.spglobal.com/******/**/***************/***********/***/****************************************************************************

https://***.spglobal.com/*****/**/************/******/****************/********************** 4

https://******.******.spglobal.com/***/******************************/********************/***/**** 4

https://***.spglobal.com/******/**/***************/***********/***/********************************************************************

https://**.spglobal.com/ 3

https://********.****.spglobal.com/***/***** 3

https://***.spglobal.com/******/**/***** 3

https://***.spglobal.com/******/**/*****************/***/********************************* 3

https://***.spglobal.com/*****/**/************/******/*********/****************** 3

https://***.spglobal.com/*** 3

https://**********.spglobal.com 3

https://***.spglobal.com/******/**/**************/********************************************************************************************************************************************************

https://***.***********.spglobal.com 3

https://***.spglobal.com/******/**/***************/***********/***********/*********************************************************

https://*********.spglobal.com 3

https://********.**********.spglobal.com/***/***** 3

http://*********.spglobal.com/ 2

https://*****.spglobal.com/ 2

https://*******.spglobal.com*****/*************/***********.****** 2

https://***.spglobal.com/******/**/***************/***********/***/******************************************************************************************

https://***.spglobal.com/******/**/***************/***********/***/*************************************************************************

http://************************.********.spglobal.com/****** 2

https://***.spglobal.com/******/**/***********/****/*********** 2

https://***.spglobal.com/******/**/***************/***********/**************/******************************************************************************

https://***.spglobal.com/******/**/***************/*****************/**************/***************** 2

Not Found 44

Reason Cybersecurity 4

Malwarebytes 1

Avast Antivirus 2

Windows Defender 27

McAfee Firewall 1

McAfee VirusScan 1

CTI Telemetry

VirusTotal Analysis

Dominio

Registrar

Motori AV Recap

Analisi Antivirus

Motori Non-Innocui

Analisi DNS

Certificato HTTPS

Infostealer analysis by HudsonRock

Stealer Family e Conteggio

Utenze Aziendali Compromesse

Utenze Users Compromesse

Antivirus Rilevati