Actor Profile

🏹 C2 Attribution — Ransomware

🔄 Pivot:🏹 C2 Attribution

Classification

Ransomware

Leak-site victims

1
Ransomware.live

Associated IoCs

200
local intel

MITRE techniques

—
ATT&CK

Tracked

Local
PIVOT🔍 Advanced Search🕵 OSINT Pivot🔗 Link Analysis🕑 Timeline📤 Export STIX/MISP

🔥 Leak-Site Victims (1)

VictimCountryPublishedDomain
— —

Source: Ransomware.live leak-site monitoring (cached, offline-safe).

Associated Indicators (200)

IndicatorTypeThreat
45.148.244.206 ip profile
139.60.161.45 ip profile
51.254.159.98 ip profile
111.230.198.142 ip profile
pharmarite.azurewebsites.net other profile
18.253.112.0 ip profile
106.54.69.144 ip profile
20.196.198.116 ip profile
156.96.157.120 ip profile
1.117.154.185 ip profile
192.252.179.225 ip profile
3.66.49.194 ip profile
18.218.193.98 ip profile
84.32.190.33 ip profile
111.229.51.128 ip profile
194.180.49.135 ip profile
23.108.57.211 ip profile
5.199.174.219 ip profile
139.155.190.117 ip profile
g.pixel other profile
dh5rg5aebo6yx.cloudfront.net other profile
3.237.99.150 ip profile
edgecast-akamaihd.net other profile
5.188.87.54 ip profile
84.32.190.100 ip profile
3.13.126.118 ip profile
146.70.106.79 ip profile
en6766.com other profile
52sya04g88x3k.cfc-execute.su.baidubce.co other profile
193.168.141.202 ip profile
cache1234.com other profile
teams-app-cdn.com other profile
108.62.118.65 ip profile
84.32.190.1 ip profile
104.243.41.123 ip profile
us-gateway.google-status.net other profile
global.teams-app-cdn.com other profile
service1app.com other profile
161.35.83.87 ip profile
cuphq.com other profile
82.157.149.194 ip profile
23.227.203.14 ip profile
139.60.161.47 ip profile
139.60.161.85 ip profile
106.55.153.204 ip profile
sunwu.world other profile
mail.service1app.com other profile
165.227.85.160 ip profile
testcs888.com other profile
www.eyefinancemonitor.com other profile
157.245.102.164 ip profile
139.60.161.162 ip profile
secure.service1app.com other profile
176.58.98.206 ip profile
167.99.197.196 ip profile
myteamserver.online other profile
www.cioudfiore.xyz other profile
163.5.169.23 ip profile
dcrwaxwvb1lj1.cloudfront.net other profile
213.227.154.100 ip profile
84.32.188.93 ip profile
146.70.87.247 ip profile
catmyinfo.top other profile
134.209.92.85 ip profile
45.128.222.243 ip profile
137.184.139.189 ip profile
139.60.160.50 ip profile
146.70.125.72 ip profile
8k8hj9277yjde.cfc-execute.bj.baidubce.co other profile
d15oagcddncz2r.cloudfront.net other profile
dev.msndla.com other profile
139.60.160.48 ip profile
ms1.msndla.com other profile
84.32.188.210 ip profile
139.60.160.52 ip profile
62.138.6.20 ip profile
backend.msndla.com other profile
hibmarket.help other profile
5.188.86.24 ip profile
routeoffice.msndla.com other profile
hungry-conversation-mgw.aws-euw1.cloud-a other profile
139.60.160.51 ip profile
84.32.188.29 ip profile
163.123.142.146 ip profile
185.240.34.10 ip profile
5.39.221.57 ip profile
5.255.106.106 ip profile
147.182.182.41 ip profile
164.92.150.47 ip profile
18.222.8.93 ip profile
jarvcza.onion other profile
84.32.128.150 ip profile
racoonm.cf other profile
78.128.112.199 ip profile
194.37.97.146 ip profile
jacollans.com other profile
161.35.24.190 ip profile
smallpetlive.com other profile
23.227.203.40 ip profile
5.181.86.249 ip profile
cv.jacollans.com other profile
47.242.158.114 ip profile
37.252.9.42 ip profile
xc.jacollans.com other profile
143.198.131.210 ip profile
77.73.134.23 ip profile
146.70.93.122 ip profile
185.81.68.90 ip profile
172.93.181.165 ip profile
ip-port.csvUT other profile
79.137.202.62 ip profile
h.ex other profile
k5vmqdk8qk0c.cfc-execute.su.baidubce.com other profile
cdnoss.sec.cm other profile
139.60.161.43 ip profile
Ai9.JY other profile
134.209.164.110 ip profile
zominoz.com other profile
139.60.161.214 ip profile
7.Nk other profile
167.172.24.169 ip profile
64.44.98.227 ip profile
I.Cd other profile
185.217.1.23 ip profile
6.Cd other profile
154.83.17.116 ip profile
172.105.27.61 ip profile
89.185.85.17 ip profile
9.rH other profile
goocoinorg.com other profile
getinteriorartstudio.com other profile
inject.jpgv other profile
O.Ey other profile
www.microsoftwindows.biz other profile
43.132.222.36 ip profile
23.106.215.64 ip profile
139.60.160.12 ip profile
I.His other profile
159.203.95.49 ip profile
p.jw other profile
media.update.updrv.com other profile
43.132.124.75 ip profile
23.106.215.139 ip profile
190.123.44.220 ip profile
tN.vO other profile
downloader.re58.cn other profile
9wyqont1h5.execute-api.us-east-1.amazona other profile
y.rEY other profile
sdkreport.happilygame.com other profile
146.190.145.40 ip profile
77.73.133.84 ip profile
108.62.118.185 ip profile
thaw.txt other profile
E.at other profile
cladonia.team other profile
manager.moonlighter.space other profile
altocloudzone.live other profile
45.147.179.211 ip profile
B4.SX other profile
44.204.120.159 ip profile
84.32.191.131 ip profile
213.227.154.170 ip profile
194.5.212.192 ip profile
d.aP other profile
conhoosst.com other profile
84.32.188.157 ip profile
7.qM other profile
dkozv1lrla3nd.cloudfront.net other profile
64.44.98.23 ip profile
onemusic24.com other profile
139.60.161.84 ip profile
H.sd other profile
178.128.79.94 ip profile
as.conhoosst.com other profile
www.onemusic24.com other profile
bDX.KWvEk other profile
zx.conhoosst.com other profile
23.19.58.163 ip profile
mail.onemusic24.com other profile
139.60.161.57 ip profile
sIa.JR other profile
31.172.83.154 ip profile
S.am other profile
www.theokanegroup.com other profile
45.147.229.22 ip profile
193.29.104.147 ip profile
SS.NN other profile
154.7.253.11 ip profile
20.187.187.128 ip profile
u.UlJ other profile
154.213.65.25 ip profile
206.189.236.243 ip profile
137.184.158.59 ip profile
j.fB other profile
192.3.76.67 ip profile
NLF.Wp other profile
us-central1-my-gcp-358120.cloudfunctions other profile
84.32.188.60 ip profile
103.146.141.98 ip profile
79.137.207.137 ip profile
MITRE ATT&CK Groups ↗ Ransomware.live ↗ APT Theater →

📁 Case Management

+ New case from this

🏹 Campaigns & malware

Campaigns →Malware families →Nation-State theater →Sanctions →Wanted & Rewards →

🏹 Add to case

Attach C2 Attribution (Actor / APT) and pull all linked entities:

🗃 Data Management

+ Case+ CampaignWatchlistTagSave searchWhitelistExport STIX/MISPReport

🧩 Advanced Capabilities

Link AnalysisPivot ExplorerTimelineThreat HuntingAnalyticsDetection RulesBlockchainOSINT PivotPassive DNSTAXII 2.1MISP FeedCreate Alert RuleNetFlowCoverage & Gaps

🧭 Intelligence disciplines

CYBINT →OSINT →HUMINT →GEOINT →
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center