Ransomfeed ransomfeed
Watermark

CTI Telemetry

CARD INFO

VirusTotal Analysis

Dominio
gisy.com
Registrar
Network Solutions, LLC
Motori AV Recap
0
Malevolo
0
Sospetto
33
Non rilevato
58
Innocuo

Acronis [harmless] clean
0xSI_f33d [undetected] unrated
Abusix [harmless] clean
ADMINUSLabs [harmless] clean
Axur [undetected] unrated
ChainPatrol [undetected] unrated
Criminal IP [harmless] clean
AILabs (MONITORAPP) [harmless] clean
AlienVault [harmless] clean
alphaMountain.ai [harmless] clean
AlphaSOC [undetected] unrated
Antiy-AVL [harmless] clean
ArcSight Threat Intelligence [undetected] unrated
AutoShun [undetected] unrated
Bfore.Ai PreCrime [undetected] unrated
BitDefender [harmless] clean
Bkav [undetected] unrated
Blueliv [harmless] clean
Certego [harmless] clean
Chong Lua Dao [harmless] clean
CINS Army [harmless] clean
Cluster25 [undetected] unrated
CRDF [harmless] clean
CSIS Security Group [undetected] unrated
Snort IP sample list [undetected] unrated
CMC Threat Intelligence [harmless] clean
CTX AI [harmless] clean
Cyan [undetected] unrated
Cyble [harmless] clean
CyRadar [harmless] clean
DNS8 [undetected] unrated
Dr.Web [harmless] clean
Ermes [undetected] unrated
ESET [harmless] clean
ESTsecurity [harmless] clean
EmergingThreats [harmless] clean
Emsisoft [harmless] clean
Forcepoint ThreatSeeker [harmless] clean
Fortinet [harmless] clean
G-Data [harmless] clean
GCP Abuse Intelligence [undetected] unrated
Google Safebrowsing [harmless] clean
GreenSnow [harmless] clean
GreyNoise [undetected] unrated
Gridinsoft [undetected] unrated
Guardpot [undetected] unrated
Heimdal Security [harmless] clean
Hunt.io Intelligence [undetected] unrated
IPsum [harmless] clean
Juniper Networks [harmless] clean
Kaspersky [harmless] clean
LevelBlue [harmless] clean
Lionic [harmless] clean
Lumu [undetected] unrated
MalwarePatrol [harmless] clean
MalwareURL [undetected] unrated
Malwared [harmless] clean
Mimecast [undetected] unrated
Netcraft [undetected] unrated
OpenPhish [harmless] clean
Phishing Database [harmless] clean
PhishFort [undetected] unrated
PhishLabs [undetected] unrated
Phishtank [harmless] clean
PREBYTES [harmless] clean
PrecisionSec [undetected] unrated
Quick Heal [harmless] clean
Quttera [harmless] clean
SafeToOpen [undetected] unrated
Sansec eComscan [undetected] unrated
Scantitan [harmless] clean
SCUMWARE.org [harmless] clean
Seclookup [harmless] clean
SecureBrain [undetected] unrated
SOCRadar [undetected] unrated
Sophos [harmless] clean
StopForumSpam [harmless] clean
Sucuri SiteCheck [harmless] clean
ThreatHive [harmless] clean
URLhaus [harmless] clean
URLQuery [undetected] unrated
Viettel Threat Intelligence [harmless] clean
VIPRE [undetected] unrated
VX Vault [harmless] clean
ViriBack [harmless] clean
Webroot [harmless] clean
Yandex Safebrowsing [harmless] clean
ZeroCERT [harmless] clean
desenmascara.me [harmless] clean
Xcitium Verdict Cloud [harmless] clean
ZeroFox [undetected] unrated

0xSI_f33d undetected (unrated)
Axur undetected (unrated)
ChainPatrol undetected (unrated)
AlphaSOC undetected (unrated)
ArcSight Threat Intelligence undetected (unrated)
AutoShun undetected (unrated)
Bfore.Ai PreCrime undetected (unrated)
Bkav undetected (unrated)
Cluster25 undetected (unrated)
CSIS Security Group undetected (unrated)
Snort IP sample list undetected (unrated)
Cyan undetected (unrated)
DNS8 undetected (unrated)
Ermes undetected (unrated)
GCP Abuse Intelligence undetected (unrated)
GreyNoise undetected (unrated)
Gridinsoft undetected (unrated)
Guardpot undetected (unrated)
Hunt.io Intelligence undetected (unrated)
Lumu undetected (unrated)
MalwareURL undetected (unrated)
Mimecast undetected (unrated)
Netcraft undetected (unrated)
PhishFort undetected (unrated)
PhishLabs undetected (unrated)
PrecisionSec undetected (unrated)
SafeToOpen undetected (unrated)
Sansec eComscan undetected (unrated)
SecureBrain undetected (unrated)
SOCRadar undetected (unrated)
URLQuery undetected (unrated)
VIPRE undetected (unrated)
ZeroFox undetected (unrated)

TXT logmein-verification-code=cd0Boyra1XclJncFWbkxzC5mB
TXT matak44n90dob0to65m65ls3k5
TXT ilfli71ti3tk584gei9j3ta2ug
TXT cubggpc7nbo415un97mom29rsu
NS ns43.worldnic.com
TXT 6psp4jsudcoi3niekhdvu10plj
A 192.124.249.38
TXT u2kk92s21806r84rfvq829vqbi
MX mx1.hc3334-94.iphmx.com
TXT abbdlu1ql99aamfdbcp66aaajd
TXT 19hktdeodcufub4tv8e3sv3e0j
TXT duo_sso_verification=1A7UxfACLFMYcZL8NPMza05mxowkBt1QNqKcTE343V1O5EHdPTin8JIVFv9m8HZb
TXT sbl80is3822rrsdn5as9b0lsgd
TXT 43kvtp1bnua9pujmbma6nrrhgp
TXT 2a78398470a7259369037383917eff76580435f61e86f420035b351ccba265b8
SOA NS43.WORLDNIC.com
TXT etv2cm7mblj6jjvm1dv4thk69
TXT _o29acarc2sa7f4lef8yj9mqwry71qdr
TXT v=spf1 exists:%{i}.spf.hc3334-94.iphmx.com include:spf.protection.outlook.com -all
TXT 2j0dbq6qpgcim5gukemogphmm8
TXT abfh05h0co28q3sjk0ejs66fub
TXT 7gkdtij2rj6gh9jk5n9cllp065
TXT prlu9dcnrv5vhu0nq6290p7v4g
TXT i9fg739iqu7hrpdop9iup655ee
TXT 327f2qvaci82k4qik7nkpkig57
TXT 146acb2nuv3jsb5pqmmvs1rh2m
TXT MYOleMyUnxePe+QnXXQB2DJtl18FlQNvM2Cyo4f31a532xqi8A0Y6bh9GpoTdRuQIiixQY0cVpc3IggyybfT/g==
TXT csfn8dhj2bmmmdl7dbumjjof08
TXT cjb9l4bq12nb6eov19him2pk0l
TXT h4c520bom8gjonoihieqb9mv7a
TXT mfipi6p2nhs61sknk7j2geue27
TXT t433oqpiaqpup6th58eh7el1or
TXT ofimb9gn821796jmkitk9der1q
TXT ilj7t9ek9sb960tgj62iicfdvu
TXT vqln74mhqtl1htjj4fb48g8j4o
TXT mi74km4anjcbvsk8juji6pj2p9
TXT 4jfotb6mbsot01mf3kluhhf63c
TXT 5n7q49bd95528q4dgs8alp96hv
TXT 2e0vksqfljgmtood16qg82mqc7
TXT adobe-idp-site-verification=09626340a3d87d9a98cde4c2cc67c18f4a217c1ad5f0904580d7a7cbc5f42dc8
TXT hikjq5h08vhph4j2k7m4f4q7p2
TXT _egusx0uncqohsdpmreli57vpyb39dhp
MX mx2.hc3334-94.iphmx.com
TXT qrb8l742796i6ofi8qr6iq66e1
TXT n087ou8ot1rdlco2vbelvfho7a
TXT 6pbgribm3crlgl9j6rup10s045
TXT 88502F71A17B1D8D27DA69C8FA886B70C01A356F05E54AF584C4090631E77B36
TXT apple-domain-verification=aEmdjB1OFadZSycv
NS ns44.worldnic.com
TXT 4a53f64c5a989b852ebe5739dd6e973f

Emesso da:
Go Daddy Secure Certificate Authority - G2
Intestato a:
gisy.com
Valido dal:
2026-05-14 20:45:48
Valido fino al:
2026-08-12 20:45:48

Infostealer analysis by HudsonRock

6
🧠 Dispositivi infetti
4
🌐 Utenti compromessi
1
🧑‍💼 Dipendenti compromessi
0
🔑 Password aziendali
0
🔑 Password users

Nessuna famiglia di stealer rilevata.

https://drvmadfsprd.gisy.com/adfs/ls 1

https://itec.gisy.com/account/login 3
https://itec.gisy.com/account/Login 1

Nessun antivirus rilevato.