Ransomfeed ransomfeed
Watermark

CTI Telemetry

CARD INFO

VirusTotal Analysis

Dominio
bathfitter.com
Registrar
GoDaddy.com, LLC
Motori AV Recap
0
Malevolo
0
Sospetto
34
Non rilevato
57
Innocuo

Acronis [harmless] clean
0xSI_f33d [undetected] unrated
Abusix [harmless] clean
ADMINUSLabs [harmless] clean
Axur [undetected] unrated
ChainPatrol [undetected] unrated
Criminal IP [undetected] unrated
AILabs (MONITORAPP) [harmless] clean
AlienVault [harmless] clean
alphaMountain.ai [harmless] clean
AlphaSOC [undetected] unrated
Antiy-AVL [harmless] clean
ArcSight Threat Intelligence [undetected] unrated
AutoShun [undetected] unrated
Bfore.Ai PreCrime [undetected] unrated
BitDefender [harmless] clean
Bkav [undetected] unrated
Blueliv [harmless] clean
Certego [harmless] clean
Chong Lua Dao [harmless] clean
CINS Army [harmless] clean
Cluster25 [undetected] unrated
CRDF [harmless] clean
CSIS Security Group [undetected] unrated
Snort IP sample list [undetected] unrated
CMC Threat Intelligence [harmless] clean
CTX AI [harmless] clean
Cyan [undetected] unrated
Cyble [harmless] clean
CyRadar [harmless] clean
DNS8 [undetected] unrated
Dr.Web [harmless] clean
Ermes [undetected] unrated
ESET [harmless] clean
ESTsecurity [harmless] clean
EmergingThreats [harmless] clean
Emsisoft [harmless] clean
Forcepoint ThreatSeeker [harmless] clean
Fortinet [harmless] clean
Fortra [undetected] unrated
G-Data [harmless] clean
GCP Abuse Intelligence [undetected] unrated
Google Safe Browsing [harmless] clean
GreenSnow [harmless] clean
GreyNoise [undetected] unrated
Gridinsoft [undetected] unrated
Guardpot [undetected] unrated
Heimdal Security [harmless] clean
Hunt.io Intelligence [undetected] unrated
IPsum [harmless] clean
Juniper Networks [harmless] clean
Kaspersky [harmless] clean
LevelBlue [harmless] clean
Lionic [harmless] clean
Lumu [undetected] unrated
MalwarePatrol [harmless] clean
MalwareURL [undetected] unrated
Malwared [harmless] clean
Mimecast [undetected] unrated
Netcraft [undetected] unrated
OpenPhish [harmless] clean
Phishing Database [harmless] clean
PhishFort [undetected] unrated
Phishtank [harmless] clean
PREBYTES [harmless] clean
PrecisionSec [undetected] unrated
Quick Heal [harmless] clean
Quttera [harmless] clean
SafeToOpen [undetected] unrated
Sansec eComscan [undetected] unrated
Scantitan [harmless] clean
SCUMWARE.org [harmless] clean
Seclookup [harmless] clean
SecureBrain [undetected] unrated
SOCRadar [undetected] unrated
Sophos [harmless] clean
StopForumSpam [harmless] clean
Sucuri SiteCheck [harmless] clean
ThreatHive [harmless] clean
URLhaus [harmless] clean
URLQuery [undetected] unrated
Viettel Threat Intelligence [harmless] clean
VIPRE [undetected] unrated
VX Vault [harmless] clean
ViriBack [harmless] clean
Webroot [harmless] clean
Yandex Safebrowsing [harmless] clean
ZeroCERT [harmless] clean
desenmascara.me [harmless] clean
Xcitium Verdict Cloud [harmless] clean
ZeroFox [undetected] unrated

0xSI_f33d undetected (unrated)
Axur undetected (unrated)
ChainPatrol undetected (unrated)
Criminal IP undetected (unrated)
AlphaSOC undetected (unrated)
ArcSight Threat Intelligence undetected (unrated)
AutoShun undetected (unrated)
Bfore.Ai PreCrime undetected (unrated)
Bkav undetected (unrated)
Cluster25 undetected (unrated)
CSIS Security Group undetected (unrated)
Snort IP sample list undetected (unrated)
Cyan undetected (unrated)
DNS8 undetected (unrated)
Ermes undetected (unrated)
Fortra undetected (unrated)
GCP Abuse Intelligence undetected (unrated)
GreyNoise undetected (unrated)
Gridinsoft undetected (unrated)
Guardpot undetected (unrated)
Hunt.io Intelligence undetected (unrated)
Lumu undetected (unrated)
MalwareURL undetected (unrated)
Mimecast undetected (unrated)
Netcraft undetected (unrated)
PhishFort undetected (unrated)
PrecisionSec undetected (unrated)
SafeToOpen undetected (unrated)
Sansec eComscan undetected (unrated)
SecureBrain undetected (unrated)
SOCRadar undetected (unrated)
URLQuery undetected (unrated)
VIPRE undetected (unrated)
ZeroFox undetected (unrated)

TXT d365mktkey=exWU9EQ58Ao1nl6CTy4x0TQd1UIkGTbsxDttqCtyXwkx
NS ns-764.awsdns-31.net
TXT MS=ms90762738
TXT _github-challenge-bathfitter-ent=e862f730d0
TXT hpe-greenlake-domain-verification=7a57524f69375775776952465a6756484f7a32584e312d3874493239482d492d
TXT facebook-domain-verification=lg2pw9ygp1fjrolb3ym6389j0yy0be
A 13.226.251.22
NS ns-281.awsdns-35.com
TXT brevo-code:1a2e096cd844620bf8b6fa8e46874a13
TXT apple-domain-verification=4AG4l6sZVVtWZOiJ
NS ns-1525.awsdns-62.org
TXT GOOGLE-SITE-VERIFICATION=A_XUNAV2YNXRCRXMUBY58RKULG5S94S-4PWS6SVESZA
A 13.226.251.46
TXT ms-domain-verification=d85ca35a-5fda-40c0-82ba-f1880ddeff3e
TXT google-site-verification=qgSFxs4rFcUaXt-cjZzr7KO4y8JumVF226w-aWJdALY
NS ns-1643.awsdns-13.co.uk
TXT ms-domain-verification=caa5b006-f1b0-4262-9a7b-c3aa924e7292
TXT smartsheet-site-validation=Vp3UN5Rm0C0GC8DmuWtdLw0truw1u3Cf
TXT google-site-verification=nNAXMV3nMwn8SC6CnG2xzfsp30lXWMyDgfKnSUSx6gc
TXT d365mktkey=J1MSRxwQQlbEDD6xi5z5vwUO5GvdliKTykmALXxKRRcx
TXT twilio-domain-verification=04eca564aa7c9ff52c17a58565148064
TXT v=spf1 include:spf.protection.outlook.com include:spfa.cpmails.com include:psm.knowbe4.com include:spf.zohomail360.ca include:can.pb-dynmktg.com include:_spf.ultipro.com
A 13.226.251.19
SOA ns-1643.awsdns-13.co.uk
A 13.226.251.113
TXT b15598ee-54d1-4f1f-bdd6-96d6cf7caeb1
MX bathfitter-com.mail.protection.outlook.com

Emesso da:
Amazon RSA 2048 M03
Intestato a:
bathfitter.com
Valido dal:
2025-08-22 00:00:00
Valido fino al:
2026-09-20 23:59:59

Infostealer analysis by HudsonRock

7
🧠 Dispositivi infetti
2
🌐 Utenti compromessi
2
🧑‍💼 Dipendenti compromessi
4
🔑 Password aziendali
0
🔑 Password users

Generic Stealer 2

https://sts.bathfitter.com/adfs/ls 4

https://bfse-ise-01.bmmtl.bathfitter.com:8443/portal/PortalSetup.action 2
https://selfservice.bathfitter.com/j_security_check 2

Not Found 1