Ransomfeed ransomfeed
Watermark

CTI Telemetry

CARD INFO

VirusTotal Analysis

Dominio
milanoristorazione.it
Registrar
N/A
Motori AV Recap
0
Malevolo
0
Sospetto
30
Non rilevato
65
Innocuo

Acronis [harmless] clean
0xSI_f33d [undetected] unrated
Abusix [harmless] clean
ADMINUSLabs [harmless] clean
Axur [undetected] unrated
ChainPatrol [undetected] unrated
Criminal IP [harmless] clean
AILabs (MONITORAPP) [harmless] clean
AlienVault [harmless] clean
alphaMountain.ai [harmless] clean
AlphaSOC [undetected] unrated
Antiy-AVL [harmless] clean
ArcSight Threat Intelligence [undetected] unrated
AutoShun [undetected] unrated
benkow.cc [harmless] clean
Bfore.Ai PreCrime [undetected] unrated
BitDefender [harmless] clean
Bkav [undetected] unrated
Blueliv [harmless] clean
Certego [harmless] clean
Chong Lua Dao [harmless] clean
CINS Army [harmless] clean
Cluster25 [undetected] unrated
CRDF [harmless] clean
CSIS Security Group [undetected] unrated
Snort IP sample list [harmless] clean
CMC Threat Intelligence [harmless] clean
Cyan [undetected] unrated
Cyble [harmless] clean
CyRadar [harmless] clean
DNS8 [harmless] clean
Dr.Web [harmless] clean
Ermes [undetected] unrated
ESET [harmless] clean
ESTsecurity [harmless] clean
EmergingThreats [harmless] clean
Emsisoft [harmless] clean
Forcepoint ThreatSeeker [harmless] clean
Fortinet [harmless] clean
G-Data [harmless] clean
GCP Abuse Intelligence [undetected] unrated
Google Safebrowsing [harmless] clean
GreenSnow [harmless] clean
Gridinsoft [undetected] unrated
Heimdal Security [harmless] clean
Hunt.io Intelligence [undetected] unrated
IPsum [harmless] clean
Juniper Networks [harmless] clean
Kaspersky [harmless] clean
Lionic [harmless] clean
Lumu [undetected] unrated
MalwarePatrol [harmless] clean
MalwareURL [undetected] unrated
Malwared [harmless] clean
Mimecast [undetected] unrated
Netcraft [undetected] unrated
OpenPhish [harmless] clean
Phishing Database [harmless] clean
PhishFort [undetected] unrated
PhishLabs [undetected] unrated
Phishtank [harmless] clean
PREBYTES [harmless] clean
PrecisionSec [undetected] unrated
Quick Heal [harmless] clean
Quttera [harmless] clean
SafeToOpen [undetected] unrated
Sansec eComscan [undetected] unrated
Scantitan [harmless] clean
SCUMWARE.org [harmless] clean
Seclookup [harmless] clean
SecureBrain [undetected] unrated
SOCRadar [harmless] clean
Sophos [harmless] clean
Spam404 [harmless] clean
StopForumSpam [harmless] clean
Sucuri SiteCheck [harmless] clean
ThreatHive [harmless] clean
Threatsourcing [harmless] clean
Trustwave [harmless] clean
Underworld [undetected] unrated
URLhaus [harmless] clean
URLQuery [undetected] unrated
Viettel Threat Intelligence [harmless] clean
VIPRE [undetected] unrated
VX Vault [harmless] clean
ViriBack [harmless] clean
Webroot [harmless] clean
Yandex Safebrowsing [harmless] clean
ZeroCERT [harmless] clean
desenmascara.me [harmless] clean
malwares.com URL checker [harmless] clean
securolytics [harmless] clean
Xcitium Verdict Cloud [harmless] clean
zvelo [undetected] unrated
ZeroFox [undetected] unrated

0xSI_f33d undetected (unrated)
Axur undetected (unrated)
ChainPatrol undetected (unrated)
AlphaSOC undetected (unrated)
ArcSight Threat Intelligence undetected (unrated)
AutoShun undetected (unrated)
Bfore.Ai PreCrime undetected (unrated)
Bkav undetected (unrated)
Cluster25 undetected (unrated)
CSIS Security Group undetected (unrated)
Cyan undetected (unrated)
Ermes undetected (unrated)
GCP Abuse Intelligence undetected (unrated)
Gridinsoft undetected (unrated)
Hunt.io Intelligence undetected (unrated)
Lumu undetected (unrated)
MalwareURL undetected (unrated)
Mimecast undetected (unrated)
Netcraft undetected (unrated)
PhishFort undetected (unrated)
PhishLabs undetected (unrated)
PrecisionSec undetected (unrated)
SafeToOpen undetected (unrated)
Sansec eComscan undetected (unrated)
SecureBrain undetected (unrated)
Underworld undetected (unrated)
URLQuery undetected (unrated)
VIPRE undetected (unrated)
zvelo undetected (unrated)
ZeroFox undetected (unrated)

NS dns7.interbusiness.it
A 2.47.145.21
TXT MS=ms46771606
NS dns3.interbusiness.it
TXT v=spf1 mx a include:turbo-smtp.com include:spf.protection.outlook.com ~all
MX milanoristorazione-it.mail.protection.outlook.com
MX mail.milanoristorazione.it
SOA dns3.interbusiness.it
TXT 1KhtB4NvdRhAPGDJ8286FRcoSFAxDR/pD8txRvYQ2SI76vsDo/ecWD/6PsmG8mzdsZ60mx3Bd1cLBq3/ns/QRg==
MX mail2.milanoristorazione.it
NS dns11.interbusiness.it

Emesso da:
Fireware web CA
Intestato a:
Fireware web CA
Valido dal:
2022-04-10 15:01:08
Valido fino al:
2032-05-07 15:01:08

Infostealer analysis by HudsonRock

338
🧠 Dispositivi infetti
325
🌐 Utenti compromessi
13
🧑‍💼 Dipendenti compromessi
29
🔑 Password aziendali
688
🔑 Password users

last_counted 2025-11-25T08:42:36.599Z
RedLine 100
Generic Stealer 60
Lumma 57
Raccoon 44
Vidar 20
StealC 15
UNKNOWN 10
Azorult 7
CRYPTBOT 2
Mystic 1
Taurus 1
Atomic 1

https://mail.milanoristorazione.it 17
https://whistleblowing.milanoristorazione.it 8
https://mail.milanoristorazione.it/owa/auth/logon.aspx 4

https://rette.milanoristorazione.it/ECivisWEB 64
https://rette.milanoristorazione.it/ECivisWEB/forcepwd.jsp 54
https://whistleblowing.milanoristorazione.it 48
https://rette.milanoristorazione.it/ECivisWEB/iscrizioni/subscrive.jsp 47
https://scuola.milanoristorazione.it/ECivisWEB/forcepwd.jsp 42
https://•••••.milanoristorazione.it/•••••••••/•••••.••• 40
https://•••••.milanoristorazione.it/•••••••••/••••••••.••• 38
https://•••••.milanoristorazione.it/•••••••••/••••.••• 35
https://•••••.milanoristorazione.it 34
https://•••••.milanoristorazione.it/•••••••••/ 31
https://•••••.milanoristorazione.it/•••••••••/••••••••••/•••••••••.••• 30
https://•••••.milanoristorazione.it/•••••••••/••••••.••• 24
https://•••••.milanoristorazione.it/•••••••••/••••••••••/•••••.••• 19
https://•••••.milanoristorazione.it/•••••••••/••••.••• 18
https://•••••.milanoristorazione.it/•••••••••/••••••.••• 15
https://•••••.milanoristorazione.it/•••••••••/••••••••••/•••••.••• 14
https://•••••.milanoristorazione.it/•••••••••/••••••/•••••• 11
http://•••.milanoristorazione.it/ 9
https://•••••.milanoristorazione.it/ 8
https://•••••.milanoristorazione.it/•••••••••/••••••/•••••••••••• 8
https://••••••.milanoristorazione.it/•••••••••/•••••.••• 8
https://•••••.milanoristorazione.it/•••••••••/••••••••••/•••••••••.••••.••• 8
https://•••.milanoristorazione.it 8
https://••••••.milanoristorazione.it 8
https://•••••.milanoristorazione.it/•••••••••/••••••/•••••• 7
http://•••.milanoristorazione.it 7
https://•••••.milanoristorazione.it/•••••••••/•••••.••• 6
https://••••••.milanoristorazione.it/••••••••• 6
https://••••••.milanoristorazione.it/•••••••••/••••••••.••• 5
https://•••••.milanoristorazione.it/•••••••••/•••••••/•••••.••• 5
https://••••••.milanoristorazione.it 5
http://•••.milanoristorazione.it/••••-•••••• 4
https://•••••.milanoristorazione.it/••••••••• 4
https://••••••.milanoristorazione.it/ 4
https://••••••.milanoristorazione.it/•••••••••/••••.••• 4
https://••••••.milanoristorazione.it/•••••••••/••••••••••/•••••••••.••• 4
https://••••••.milanoristorazione.it/•••••••••/••••••••••/•••••••••.••••.••• 4
https://••••••.milanoristorazione.it/•••••••••/••••••/•••••• 4
https://•••••.milanoristorazione.it/•••••••••/••••••/•••••••••••• 3
https://•••••.milanoristorazione.it/•••••••••/••••••••••/•••••••••.••••.••• 3
https://•••.milanoristorazione.it 3
http://•••.milanoristorazione.it/••••••••-••••••• 3
https://•••••.milanoristorazione.it/•••••••••/••••••/••••••••• 3
https://••••••.milanoristorazione.it/•••••••••/ 2
https://••••••.milanoristorazione.it/•••••••••/••••.••• 2
https://•••••.milanoristorazione.it/•••••••••/••••••••.••• 1
https://•••••.milanoristorazione.it/•••••••••/••••••/••••••••• 1
https://••••••.milanoristorazione.it/•••••••••/•••••.••• 1
https://•••••••••••••••••••.milanoristorazione.it/•••••••.••• 1
https://•••.milanoristorazione.it/•••/•••/•••••.••• 1
https://••••••.milanoristorazione.it/••••• 1
https://•••.milanoristorazione.it/••••-•••••• 1

Reason Cybersecurity 2
Avast Antivirus 1
McAfee Firewall 2
Not Found 3
McAfee Endpoint Security 1
Windows Defender 4
McAfee VirusScan 2
360 Total Security 1