Ransomfeed ransomfeed
Watermark

CTI Telemetry

CARD INFO

VirusTotal Analysis

Dominio
forces.gc.ca
Registrar
N/A
Motori AV Recap
0
Malevolo
0
Sospetto
34
Non rilevato
57
Innocuo

Acronis [harmless] clean
0xSI_f33d [undetected] unrated
Abusix [harmless] clean
ADMINUSLabs [harmless] clean
Axur [undetected] unrated
ChainPatrol [undetected] unrated
Criminal IP [harmless] clean
AILabs (MONITORAPP) [harmless] clean
AlienVault [harmless] clean
alphaMountain.ai [harmless] clean
AlphaSOC [undetected] unrated
Antiy-AVL [harmless] clean
ArcSight Threat Intelligence [undetected] unrated
AutoShun [undetected] unrated
Bfore.Ai PreCrime [undetected] unrated
BitDefender [harmless] clean
Bkav [undetected] unrated
Blueliv [harmless] clean
Certego [harmless] clean
Chong Lua Dao [harmless] clean
CINS Army [harmless] clean
Cluster25 [undetected] unrated
CRDF [harmless] clean
CSIS Security Group [undetected] unrated
Snort IP sample list [undetected] unrated
CMC Threat Intelligence [harmless] clean
CTX AI [harmless] clean
Cyan [undetected] unrated
Cyble [harmless] clean
CyRadar [harmless] clean
DNS8 [undetected] unrated
Dr.Web [harmless] clean
Ermes [undetected] unrated
ESET [harmless] clean
ESTsecurity [harmless] clean
EmergingThreats [harmless] clean
Emsisoft [harmless] clean
Forcepoint ThreatSeeker [harmless] clean
Fortinet [harmless] clean
G-Data [harmless] clean
GCP Abuse Intelligence [undetected] unrated
Google Safebrowsing [harmless] clean
GreenSnow [harmless] clean
GreyNoise [undetected] unrated
Gridinsoft [undetected] unrated
Guardpot [undetected] unrated
Heimdal Security [harmless] clean
Hunt.io Intelligence [undetected] unrated
IPsum [harmless] clean
Juniper Networks [harmless] clean
Kaspersky [harmless] clean
LevelBlue [harmless] clean
Lionic [harmless] clean
Lumu [undetected] unrated
MalwarePatrol [harmless] clean
MalwareURL [undetected] unrated
Malwared [harmless] clean
Mimecast [undetected] unrated
Netcraft [undetected] unrated
OpenPhish [harmless] clean
Phishing Database [harmless] clean
PhishFort [undetected] unrated
PhishLabs [undetected] unrated
Phishtank [harmless] clean
PREBYTES [harmless] clean
PrecisionSec [undetected] unrated
Quick Heal [harmless] clean
Quttera [harmless] clean
SafeToOpen [undetected] unrated
Sansec eComscan [undetected] unrated
Scantitan [harmless] clean
SCUMWARE.org [harmless] clean
Seclookup [harmless] clean
SecureBrain [undetected] unrated
SOCRadar [undetected] unrated
Sophos [harmless] clean
StopForumSpam [harmless] clean
Sucuri SiteCheck [harmless] clean
ThreatHive [harmless] clean
URLhaus [harmless] clean
URLQuery [undetected] unrated
Viettel Threat Intelligence [harmless] clean
VIPRE [undetected] unrated
VX Vault [harmless] clean
ViriBack [harmless] clean
Webroot [harmless] clean
Yandex Safebrowsing [harmless] clean
ZeroCERT [harmless] clean
desenmascara.me [harmless] clean
Xcitium Verdict Cloud [undetected] unrated
ZeroFox [undetected] unrated

0xSI_f33d undetected (unrated)
Axur undetected (unrated)
ChainPatrol undetected (unrated)
AlphaSOC undetected (unrated)
ArcSight Threat Intelligence undetected (unrated)
AutoShun undetected (unrated)
Bfore.Ai PreCrime undetected (unrated)
Bkav undetected (unrated)
Cluster25 undetected (unrated)
CSIS Security Group undetected (unrated)
Snort IP sample list undetected (unrated)
Cyan undetected (unrated)
DNS8 undetected (unrated)
Ermes undetected (unrated)
GCP Abuse Intelligence undetected (unrated)
GreyNoise undetected (unrated)
Gridinsoft undetected (unrated)
Guardpot undetected (unrated)
Hunt.io Intelligence undetected (unrated)
Lumu undetected (unrated)
MalwareURL undetected (unrated)
Mimecast undetected (unrated)
Netcraft undetected (unrated)
PhishFort undetected (unrated)
PhishLabs undetected (unrated)
PrecisionSec undetected (unrated)
SafeToOpen undetected (unrated)
Sansec eComscan undetected (unrated)
SecureBrain undetected (unrated)
SOCRadar undetected (unrated)
URLQuery undetected (unrated)
VIPRE undetected (unrated)
Xcitium Verdict Cloud undetected (unrated)
ZeroFox undetected (unrated)

NS ns41.ent.global.gc.ca
NS ns2.d-zone.ca
TXT google-site-verification=KB7mFwU4GQ4rXnfTO7eleezOOjo3U5xYQjVp5ea-5Wg
MX mx02.forces.gc.ca
TXT mm7bf8IBeCDUfkw0kmiFcQMlN6XvqwKhyjt8RC3+eSX0nZtdjnpVbGlnH8M4+Lf6KLpHlvMTLWfrgDuQOG4egw==
MX mx01.forces.gc.ca
NS ns11.ent.global.gc.ca
TXT google-gws-recovery-domain-verification=68065237
TXT v=spf1 ip4:131.138.138.26 mx a include:spf.protection.outlook.com include:emrs._spf.ssc-spc.gc.ca -all
TXT amazonses:s8oKQQ7s8PtsUOpOiLuaQxfcO6i/DPrUdfwFvYTHA90=
SOA ns10.ent.global.gc.ca
NS ns40.ent.global.gc.ca
TXT google-site-verification=ggpI9daeYdJ3aMyIlmIfG-8e_uam3w_xTsqKsc4zbIM
NS ns1.d-zone.ca
TXT apple-domain-verification=3AdmF0Oj2r59I8Sn
A 131.137.250.13
MX mx03.forces.gc.ca
TXT autodesk-domain-verification=E_g69nTDURpDgiFh504f
MX mx04.forces.gc.ca
TXT MS=ms70527395
NS ns10.ent.global.gc.ca

Emesso da:
Entrust OV TLS Issuing RSA CA 2
Intestato a:
forces.gc.ca
Valido dal:
2026-04-22 00:00:00
Valido fino al:
2026-11-06 23:59:59

Infostealer analysis by HudsonRock

1169
🧠 Dispositivi infetti
886
🌐 Utenti compromessi
32
🧑‍💼 Dipendenti compromessi
23
🔑 Password aziendali
257
🔑 Password users

Azorult 54
Lumma 137
StealC 14
Acreed 5
Mystic 1
Generic Stealer 214
RedLine 132
UNKNOWN 7
Atomic 1
Vidar 36
Raccoon 43
CRYPTBOT 1

https://sra.cadets.forces.gc.ca 18
https://sra.cadets.forces.gc.ca/RDWeb/WebClient 14
https://lp-pa.forces.gc.ca/portal 6
https://dln-rad.forces.gc.ca/login-lien/index-eng.jsp 3
https://sra.cadets.forces.gc.ca/ 3
https://dln-rad.forces.gc.ca/ 2
https://lp-pa.forces.gc.ca/portal/ 2
https://sra.cadets.forces.gc.ca/RDWeb/Pages/en-US/login.aspx 2
https://sra.cadets.forces.gc.ca/rdweb/pages/en-us/login.aspx 1
https://sra.cadets.forces.gc.ca/rdweb/pages/fr-fr/login.aspx 1
https://sra.cadets.forces.gc.ca/rdweb/webclient/ 1
https://sra.cadets.forces.gc.ca/RDWeb/Pages/fr-FR/login.aspx 1
https://lp-pa.forces.gc.ca 1

https://www.prod-recruiting-recrutement.forces.gc.ca/protected/login.aspx 271
https://www.cafoap-pclfac.forces.gc.ca/reg.aspx 183
https://dln-rad.forces.gc.ca/login-lien/index-eng.jsp 182
https://dln-rad.forces.gc.ca 104
https://www.cafoap-pclfac.forces.gc.ca 100
https://dln-rad.forces.gc.ca/login-lien/index-fra.jsp 51
https://www.prod-recruiting-recrutement.forces.gc.ca 47
https://www.prod-recruiting-recrutement.forces.gc.ca/protected/app2.aspx 40
https://www.cafoap-pclfac.forces.gc.ca/p_r.aspx 40
https://www.cafoap-pclfac.forces.gc.ca/auth.aspx 28
https://sra.cadets.forces.gc.ca 22
https://dln-rad.forces.gc.ca/ 21
https://www.cdlsw-elfcw.forces.gc.ca 17
https://dln-rad.forces.gc.ca/Saba/Web_wdk/Main/common/login/changePassword.rdf 15
http://www.cmp-cpm.forces.gc.ca/cfpas-sepfc/en/index.asp 11
https://www.prod-recruiting-recrutement.forces.gc.ca/ 7
https://dln-rad.forces.gc.ca/Saba/Web/Main 7
https://dln-rad.forces.gc.ca/saba/web_wdk/main/index/preloginclassic.rdf 6
https://dln-rad.forces.gc.ca/Saba/Web_wdk/Main/index/preloginclassic.rdf 6
https://www.prod-recruiting-recrutement.forces.gc.ca/Protected/login.aspx 6
https://lp-pa.forces.gc.ca/portal 5
https://dln-rad.forces.gc.ca/saba/web_wdk/main/common/login/changepassword.rdf 5
http://www.mapleflag.forces.gc.ca 5
https://lp-pa.forces.gc.ca/portal/users 4
https://www.app.allies.forces.gc.ca 3
https://lp-pa.forces.gc.ca/portal/ 3
https://www.app.allies.forces.gc.ca/ 3
https://www.app.allies.forces.gc.ca/loader/login-eng.aspx 3
https://met.forces.gc.ca 3
https://dln-rad.forces.gc.ca/login-lien/index-eng.aspx 3
http://www.dndlearn.forces.gc.ca/index-eng.asp 2
https://www.app.allies.forces.gc.ca/Loader/login-eng.aspx 2
http://www.dndlearn.forces.gc.ca/ 1
https://lp-pa.forces.gc.ca/ 1
https://sra.cadets.forces.gc.ca/ 1
https://www.app.allies.forces.gc.ca/loader/login-fra.aspx 1
https://mars.cfc.forces.gc.ca/CFCLearn/login/login-eng.html 1
https://dln-rad.forces.gc.ca/Saba/Web_wdk/Main/index/configurableLoginPage.rdf 1
http://dgpaapp.forces.gc.ca/fr/vet/conferencier/index.asp 1
https://caface-rfacace.forces.gc.ca/en/manage_profile 1
https://www.app.allies.forces.gc.ca/Loader/login-fra.aspx 1
https://lp-pa.forces.gc.ca 1
http://www.cmp-cpm.forces.gc.ca 1
https://dln-rad.forces.gc.ca/login-lien/index-fra.aspx 1
https://www.cafoap-pp2-trg.forces.gc.ca/auth.aspx 1
https://www.cafoap-pp2-trg.forces.gc.ca/reg.aspx 1
https://met.forces.gc.ca/english/charts/gfacn32/login 1

None 1
Bitdefender Antivirus 1
Windows Defender 3
Kaspersky Total Security 1
Not Found 13
Norton Security 1
Bitdefender Pare-feu 1