Ransomfeed ransomfeed
Watermark

CTI Telemetry

CARD INFO

VirusTotal Analysis

Dominio
colliers.com
Registrar
Cloudflare, Inc.
Motori AV Recap
0
Malevolo
0
Sospetto
33
Non rilevato
58
Innocuo

Acronis [harmless] clean
0xSI_f33d [undetected] unrated
Abusix [harmless] clean
ADMINUSLabs [harmless] clean
Axur [undetected] unrated
ChainPatrol [undetected] unrated
Criminal IP [harmless] clean
AILabs (MONITORAPP) [harmless] clean
AlienVault [harmless] clean
alphaMountain.ai [harmless] clean
AlphaSOC [undetected] unrated
Antiy-AVL [harmless] clean
ArcSight Threat Intelligence [undetected] unrated
AutoShun [undetected] unrated
Bfore.Ai PreCrime [undetected] unrated
BitDefender [harmless] clean
Bkav [undetected] unrated
Blueliv [harmless] clean
Certego [harmless] clean
Chong Lua Dao [undetected] unrated
CINS Army [harmless] clean
Cluster25 [undetected] unrated
CRDF [harmless] clean
CSIS Security Group [undetected] unrated
Snort IP sample list [undetected] unrated
CMC Threat Intelligence [harmless] clean
CTX AI [harmless] clean
Cyan [undetected] unrated
Cyble [harmless] clean
CyRadar [harmless] clean
DNS8 [undetected] unrated
Dr.Web [harmless] clean
Ermes [undetected] unrated
ESET [harmless] clean
ESTsecurity [harmless] clean
EmergingThreats [harmless] clean
Emsisoft [harmless] clean
Forcepoint ThreatSeeker [harmless] clean
Fortinet [harmless] clean
Fortra [undetected] unrated
G-Data [harmless] clean
GCP Abuse Intelligence [undetected] unrated
Google Safe Browsing [harmless] clean
GreenSnow [harmless] clean
GreyNoise [undetected] unrated
Gridinsoft [undetected] unrated
Guardpot [undetected] unrated
Heimdal Security [harmless] clean
Hunt.io Intelligence [undetected] unrated
IPsum [harmless] clean
Juniper Networks [harmless] clean
Kaspersky [harmless] clean
LevelBlue [harmless] clean
Lionic [harmless] clean
Lumu [undetected] unrated
MalwarePatrol [harmless] clean
MalwareURL [undetected] unrated
Malwared [harmless] clean
Mimecast [undetected] unrated
Netcraft [undetected] unrated
OpenPhish [harmless] clean
Phishing Database [harmless] clean
PhishFort [undetected] unrated
Phishtank [harmless] clean
PREBYTES [harmless] clean
PrecisionSec [undetected] unrated
Quick Heal [harmless] clean
Quttera [harmless] clean
SafeToOpen [undetected] unrated
Sansec eComscan [undetected] unrated
Scantitan [harmless] clean
SCUMWARE.org [harmless] clean
Seclookup [harmless] clean
SecureBrain [undetected] unrated
SOCRadar [undetected] unrated
Sophos [harmless] clean
StopForumSpam [harmless] clean
Sucuri SiteCheck [harmless] clean
ThreatHive [harmless] clean
URLhaus [harmless] clean
URLQuery [harmless] clean
Viettel Threat Intelligence [harmless] clean
VIPRE [undetected] unrated
VX Vault [harmless] clean
ViriBack [harmless] clean
Webroot [harmless] clean
Yandex Safebrowsing [harmless] clean
ZeroCERT [harmless] clean
desenmascara.me [harmless] clean
Xcitium Verdict Cloud [harmless] clean
ZeroFox [undetected] unrated

0xSI_f33d undetected (unrated)
Axur undetected (unrated)
ChainPatrol undetected (unrated)
AlphaSOC undetected (unrated)
ArcSight Threat Intelligence undetected (unrated)
AutoShun undetected (unrated)
Bfore.Ai PreCrime undetected (unrated)
Bkav undetected (unrated)
Chong Lua Dao undetected (unrated)
Cluster25 undetected (unrated)
CSIS Security Group undetected (unrated)
Snort IP sample list undetected (unrated)
Cyan undetected (unrated)
DNS8 undetected (unrated)
Ermes undetected (unrated)
Fortra undetected (unrated)
GCP Abuse Intelligence undetected (unrated)
GreyNoise undetected (unrated)
Gridinsoft undetected (unrated)
Guardpot undetected (unrated)
Hunt.io Intelligence undetected (unrated)
Lumu undetected (unrated)
MalwareURL undetected (unrated)
Mimecast undetected (unrated)
Netcraft undetected (unrated)
PhishFort undetected (unrated)
PrecisionSec undetected (unrated)
SafeToOpen undetected (unrated)
Sansec eComscan undetected (unrated)
SecureBrain undetected (unrated)
SOCRadar undetected (unrated)
VIPRE undetected (unrated)
ZeroFox undetected (unrated)

TXT 5pcshr1mPjj7Ie1ukvBJn3PEAC2JJa6JEtSG/URRCjx8OP9FtkrgQhLrIJKmmJCzCUPBXlXtI5OvfGruYmydxw==
TXT successfactors-site-verification=ZjQ0YjIwN2U4YmE5NTdiMDVkMmNlYzZiN2VmZjc2YTNhY2IxNzk5M2YyYzJlZmEwM2IzYzQ1M2QwMmRmMzA0ZA==
TXT 90ueu04m1aq41li1om7cs88ohd
TXT d365mktkey=69gbh6pdwncr4t8tyh9ehffid
TXT d365mktkey=jQqxeFURekUnmCmPEvq3ke6ka6sobos3IN3YjdBkBdUx
TXT LFuJd/ZHjCs7haOG8B7qkU7sbr04F/Dlvju4ikzmmH7QkJ+jEdX9IEi6ykx7EtbSULtOyVqGpIXuQLoQuIE94Q==
TXT Sendinblue-code:62fb868f1ea0eb4dfc506c7f8088f80d
TXT v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
TXT Sendinblue-code:72a8dfaf399bf08e3ed19991d6fea62b
SOA norah.ns.cloudflare.com
TXT e2ma-verification=zmrbb
TXT asv=9ee982817c53670ee240d0ae5032b954
TXT onetrust-domain-verification=a7f0c350d1664ec59182c82d2525b061
TXT d365mktkey=4jawkw2a347xdqerernmz676i
TXT google-site-verification=kYBr68GIOaJs6s1Lwsl3CW-7wqEOAjhPv-lz8qYPP4k
TXT nearmap-domain-verification=433624225c4e205ad0788333f5100150074cb542857d351d56cc86e8810a6356
TXT 21dct87h76v8fvdfmn002rvfm4
TXT aogomcg7rpn2g2n1ra9ibkd4jb
TXT adobe-idp-site-verification=7bf52a50-16cf-4a21-a008-9a0a0e468215
TXT facebook-domain-verification=fkux577q7i52k2anly384z8v3b84dz
TXT google-site-verification=djiooeYpA5C0GxbqgBRjCgfNufUXvWFoVXd6Tl7MltY
TXT brevo-code:69c2d7618d69361f0fdc55ecfe280eed
TXT nitro-verification-code=NDI2Njg1MDU4NDk1NTM0NDkx
TXT figma-domain-verification=8c0612b9a5b5203df572dd8b5705d1c071bf71e0d4b548039810d000ad73a70f-1746223553
MX mx0a-0025eb03.pphosted.com
TXT docusign=jas-03052022-95587c64-f057-4fff-9336-90a9d64790e9
TXT google-site-verification=jlRGo0e1gEAG8oS-vHgrNMwlr7-bGiuhozW6ncgML3o
TXT docusign=546045ce-5eeb-429f-aa75-8e0be427de6d
TXT google-site-verification=sYthz0UydffKVrxRUaFfDSjWw7I-6QZ2zTDzxSPbpVo
TXT asv=916ec1faceeacb57539c7b1040c23ae7
TXT 38379
TXT ZOOM_verify_ngmMOn8kRISIcAz61bSiQA
TXT logmein-verification-code=6G71Tix9gRqRmqniBkQ207t7g
TXT vkq4op01a9g5nd2ocb2j9q6li2
MX mxb-0025eb03.gslb.pphosted.com
TXT d365mktkey=26s20jbdp5oam9gil1qm9zsky
TXT Sendinblue-code:1fb245a6d1f179d1447f87da742904fc
TXT d365mktkey=xYxGiKxItvBcJ4FRK2n9jxoleARPTENyChzGplvkMxcx
TXT google-site-verification=T8JLo8ELctPx7z2afVppWWDd90Z0hrBWXLKlLLXymgU
TXT apple-domain-verification=BPrjLCcDcFoOjP2K
TXT google-site-verification=hLwcjo70YgDO5e2PrJWJ_ZIkmGKZI8Ds2xlJMICcW2Y
NS zahir.ns.cloudflare.com
TXT successfactors-site-verification=ZmI1MzA4MDcxYmY4ZTRjYjk4YWFjMDM1YWZjYjNmZGU4YjAwNDZlMjE1ZGY4ZjZkZjJiODU2MGJjMmVlMmUwZA==
TXT atlassian-domain-verification=f6dOuG3O6VUxAFWUg22tFXLM4o1lXD1a/r5i2tf34sd88fsPYvmldXdFVVWX24RL
TXT brevo-code:65933b610fbed9fc9b9d61ebb7b88ba6
TXT 5bpi6ugtqi9vhcqts2s42d0r09
TXT sitecore-domain-verification=9a0fd9f997e24a5f9c614c4b23eeaebc
TXT cCnMXzmIBnSl9B5mh4X6c/5WK9lNag+ViJtnjdiAazU=
MX mxa-0025eb03.gslb.pphosted.com
TXT pardot859873=1d3fb6e76675ec9f1717fb34c652842cb6022cf9e2537a24855e5566e942ab0c
MX mx0b-0025eb03.pphosted.com
TXT google-site-verification=QVkwnjL8PF_3mJpDc3XFlfxjjKrzvO0KOvzzBhi9GAs
TXT msfpkey=3gd2wlgp1c0iec456b8hfs5um
NS norah.ns.cloudflare.com
TXT e2ma-verification=8ri
TXT docusign=Z3Z3-6BAA1616-6F45-4F2A-92F8-15469323CE35
TXT apple-domain-verification=PiDsuPLW80WeAaIe
TXT d365mktkey=GDh8K1J3zldi6S9Dxgsr8EwSIbNyP3xdwCloX3sKma4x
TXT SFMC-NK2MRdmtIuKbxSf3LODcdzmN50_29Q0qwDynjbc2
TXT pardot369961=00203acee236adfe9af70b24e896e6391366ec507b66b78ed9eeaf9bd1856f4a
A 137.117.9.212
TXT google-site-verification=18wo9f88NvkeqwEDlNry9OlGDth2MORSiOt9cCGNikg

Emesso da:
GeoTrust TLS RSA CA G1
Intestato a:
colliers.com
Valido dal:
2026-06-10 00:00:00
Valido fino al:
2026-12-10 23:59:59

Infostealer analysis by HudsonRock

318
🧠 Dispositivi infetti
1
🌐 Utenti compromessi
89
🧑‍💼 Dipendenti compromessi
164
🔑 Password aziendali
24
🔑 Password users

RedLine 32
Lumma 10
Generic Stealer 22
Raccoon 17
StealC 3
Azorult 4
Taurus 1

https://adfs.colliers.com/adfs/ls 54
https://adfsauthentication.colliers.com/adfs/ls 27
https://adfs.colliers.com 21
https://adfs.colliers.com/ 8
https://adfs.colliers.com/adfs/ls/ 7
https://adfsauthentication.colliers.com/adfs/ls/ 6
http://adw.colliers.com/ServiceDesk/SignIn.aspx 6
https://adw.colliers.com/Adaxes/MyServiceDesk 5
https://adw.colliers.com/MyServiceDesk/SignIn.aspx 5
https://adfs.colliers.com/adfs/ls/idpinitiatedsignon.aspx 4
https://rds.colliers.com/RDWeb/Pages/en-US/login.aspx 4
http://adw.colliers.com 3
https://adw.colliers.com/ServiceDesk/SignIn.aspx 3
https://remote.colliers.com/vpn/index.html 3
https://adw.colliers.com 2
https://adfsauthentication.colliers.com 2
https://adfsauthentication.colliers.com/ 1
https://adw.colliers.com/adaxes/myservicedesk 1
https://netconnect.colliers.com/my.policy 1
https://apps.colliers.com/ServiceCenter/Home.aspx 1
https://dev.adfs.colliers.com 1
https://adfs.colliers.com/adfs/oauth2/authorize 1
https://cms-signin.colliers.com/Account/Login 1

http://content.colliers.com/sitecore/login 4
https://adw.colliers.com/Adaxes/MyServiceDesk 4
https://remsusayardin.colliers.com/Voyager60/pages/Login.aspx 3
https://www.colliers.com/sitecore/login 2
http://dtscanada.colliers.com 2
http://content.colliers.com/ 1
https://adw.colliers.com/adaxes/myservicedesk 1
https://dev.data.colliers.com/cinchysso/account/login 1
https://qa.data.colliers.com/cinchysso/Account/Login 1
http://dtsusasupport.colliers.com 1
http://dtsusa.colliers.com 1
https://apps.colliers.com 1
https://brandportal.colliers.com/bms 1
http://content.colliers.com 1

Reason Cybersecurity 4
Windows Defender 14
Avast Antivirus 1
Windows Defender [ON] 1
McAfee Firewall 1
Not Found 27
360 Total Security 2