Actor Profile

🏹 Ransomware Actors — Ransomware

🔄 Pivot:🏹 Ransomware Actors

Classification

Ransomware

Leak-site victims

Ransomware.live

Associated IoCs

200

local intel

MITRE techniques

—

ATT&CK

Tracked

Local

PIVOT🔍 Advanced Search 🕵 OSINT Pivot 🔗 Link Analysis 🕑 Timeline 📤 Export STIX/MISP

🔥 Leak-Site Victims (1)

Victim	Country	Published	Domain
—			—

Source: Ransomware.live leak-site monitoring (cached, offline-safe).

Associated Indicators (200)

Indicator	Type
`https://www.ransomlook.io/group/crpx0`	url	profile
`http://crpx0.su/`	url	profile
`http://tlxoddx4odmc2qvsmtsbgwwsv5j45osb5`	url	profile
`https://www.ransomlook.io/group/redact`	url	profile
`http://ursba4dbibo27dtwtgy3l2pc3ekut7hel`	url	profile
`http://neclc36yt4yaa5lv54kh4qbhvjcvuv6nn`	url	profile
`https://www.ransomlook.io/group/sevyware`	url	profile
`http://sevykkkuzbxjpkb7gtfxnltn73bm6vaxg`	url	profile
`https://www.ransomlook.io/group/spy`	url	profile
`https://spycorp.pro/`	url	profile
`https://www.ransomlook.io/group/0day`	url	profile
`http://odaygplp3zhyx7zl45egetl6dzc4redui`	url	profile
`https://www.ransomlook.io/group/settra`	url	profile
`http://pbxvml6h3wz35qlr5muy2cg5jvjsd4qhj`	url	profile
`http://c3u3g7dz2yxkefci3x34jfvfa4gka4iog`	url	profile
`http://ttfy4zmtiaywfkkmykpxiwtlxkcr5ofvr`	url	profile
`http://26z3gms2rshr2zzedxhw5fbucilmgt2in`	url	profile
`http://settra5ldqwgtw5q7z5awbsvlksakyfoj`	url	profile
`https://www.ransomlook.io/group/ulose`	url	profile
`https://www.ransomlook.io/group/icarus`	url	profile
`http://e6ujsppajgb756x7x5ykdryvlcjynltb5`	url	profile
`https://www.ransomlook.io/group/bavacai`	url	profile
`https://www.ransomlook.io/group/doommage`	url	profile
`http://iacjvmxjb2ivqkxxzmde4w6g53gn6ym7c`	url	profile
`https://www.ransomlook.io/group/cmd`	url	profile
`https://cmdofficial.com/`	url	profile
`http://cmdnkiqjije2tllr3biee2sjgj3i4robg`	url	profile
`https://www.ransomlook.io/group/blackfil`	url	profile
`http://blacknbsxfdmjtx4yn533zzm4bemtdfl6`	url	profile
`https://www.ransomlook.io/group/triple`	url	profile
`http://6qqz6m3b6htudohg2mlf5gdcalonxy3sh`	url	profile
`http://ojcmpbdncjo5dhaxxll44bq6to3kwqtoe`	url	profile
`https://www.ransomlook.io/group/wallstre`	url	profile
`http://4dwiv37h7hhuhjpvtn72hme4ylcv3qoe6`	url	profile
`https://www.ransomlook.io/group/booba`	url	profile
`http://7t3zi3e7ki6iseun77ofqtr6wmbpgnpc2`	url	profile
`http://7t3zi3e7ki6iseun77ofqtr6wmbpgnpc2`	url	profile
`https://www.ransomlook.io/group/titan`	url	profile
`https://titanblog.org/`	url	profile
`https://www.ransomlook.io/group/deadlock`	url	profile
`https://www.ransomlook.io/group/mnt6`	url	profile
`http://ttvbuilv5mf2wggfjgmvin22ndzghpukh`	url	profile
`https://www.ransomlook.io/group/prinz`	url	profile
`http://prinzkpn6d3itrgcytmsmlcpt5mgwn3ih`	url	profile
`http://6cudc5cqa2bjpwdhcwm2lj6dbqejjjqze`	url	profile
`https://www.ransomlook.io/group/hyflock`	url	profile
`http://e5hdifgit6ua7k4ggmltume7kbyryksdn`	url	profile
`https://www.ransomlook.io/group/aurora`	url	profile
`https://exposedrecords.io/`	url	profile
`http://pavregldzg2ypbd3gxbil2suxfok7ykmc`	url	profile
`http://ijexszhscln27nl263lmcd7tx3jttkhm4`	url	profile
`https://www.ransomlook.io/group/leak`	url	profile
`https://www.ransomlook.io/group/timc`	url	profile
`http://rzzfiwoop67jrxadngcy7nvjm7suwtrjz`	url	profile
`https://www.ransomlook.io/group/killada`	url	profile
`http://killada5556ahpb4cwmatv5qpzku2qmdl`	url	profile
`http://killada7qgdpvzpezjxaa64b47bz47hzb`	url	profile
`http://killadahaynpqrkppe2m2tgindbruaeie`	url	profile
`http://killadax36r6bbb3md67ekcfv5yasdlno`	url	profile
`http://killadaxczzw3wnuaxkygib67lk2qkgnk`	url	profile
`http://killadaayyuzdshwskrnsvh5owzuwa4yj`	url	profile
`https://www.ransomlook.io/group/audit`	url	profile
`http://cjg2avmzoly7k6mw7xobnyre354jxro4q`	url	profile
`http://6tdqqaxftvradka5d2frzgwixis7fmro7`	url	profile
`https://www.ransomlook.io/group/threatma`	url	profile
`http://hi6bo2aihmuzkaj6gi6sigmut5bcwvguq`	url	profile
`https://www.ransomlook.io/group/lamashtu`	url	profile
`http://lamashtux5j74mcm7lwwgn5yrvuwtrpxj`	url	profile
`http://lamashtux5j74mcm7lwwgn5yrvuwtrpxj`	url	profile
`https://www.ransomlook.io/group/alp-001`	url	profile
`http://qthem3ogqqixjhhwacto6pqbjfy2vcykd`	url	profile
`http://b4riuxx7ypobdptctf6lyfcvgi6vn74iu`	url	profile
`https://www.ransomlook.io/group/nblock`	url	profile
`http://nblockn6jjp3xxh2do4ckkcer7w54sube`	url	profile
`https://www.ransomlook.io/group/blackwat`	url	profile
`http://ejzl7cjxmkx7lzhiqwidmrwtfjv45pkcz`	url	profile
`http://6t5g73fbzdjuhvvovuvuhc4mdgefrwn75`	url	profile
`https://www.ransomlook.io/group/krybit`	url	profile
`http://krybieodq754vlwufrsuxaswxb5zpxyib`	url	profile
`http://krybitqsdzwmhnitvwuhvsntfgf2wrhxv`	url	profile
`http://krybitx3fh5krdnhegyp2ob3lhizsaiad`	url	profile
`http://krybitxdpxohsmjooeb3gbgpmdddreh6m`	url	profile
`https://www.ransomlook.io/group/m3rx`	url	profile
`http://4k6plf4h2cm2nco6ae3inrsxnmqgl6lll`	url	profile
`http://pippahtohg6qgioqu3ixrsueefuw7thyt`	url	profile
`https://www.ransomlook.io/group/netrunne`	url	profile
`http://netrunrs65cn2yidokrmxn5rrur2gjpuy`	url	profile
`http://netrunrsb3bivj5gnwajzxlig5qkteb6e`	url	profile
`https://www.ransomlook.io/group/zetarink`	url	profile
`http://5cxxlyurwn2usx5qwtlny7o3r5a5nb46l`	url	profile
`https://www.ransomlook.io/group/xp95`	url	profile
`http://37lfmtakhknzx5t6k57ieijkiqrc4c3kp`	url	profile
`https://www.ransomlook.io/group/exitium`	url	profile
`http://m3ksukzn2glzfdvlusohril7n3iyk4z4f`	url	profile
`https://www.ransomlook.io/group/vect`	url	profile
`http://vectordntlcrlmfkcm4alni734tbcrnd5`	url	profile
`http://158.94.210.11:8000/`	url	profile
`http://bu7zr6fotni3qxxoxlcmpikwtp5mjzy7j`	url	profile
`https://www.ransomlook.io/group/lsd`	url	profile
`http://t.me/rewreglsd`	url	profile
`https://www.ransomlook.io/group/reynolds`	url	profile
`https://www.ransomlook.io/group/ironchai`	url	profile
`http://ironchaindecrypt7xfzq5tclm9jzpwq7`	url	profile
`https://www.ransomlook.io/group/payload`	url	profile
`http://payload6eualw6kni6v2lqn7ovjcl76oj`	url	profile
`https://www.ransomlook.io/group/kittykat`	url	profile
`http://vs6ccwled72hwmescxr2e32mmfrm6vbqb`	url	profile
`https://www.ransomlook.io/group/shadowby`	url	profile
`http://shdwbt3ja2ptjt6poluegas44i35727lg`	url	profile
`http://sdwbytqeb664krp2wz2qs3lxxah2rhneu`	url	profile
`http://45.84.0.211`	url	profile
`http://shadoz22.io/`	url	profile
`https://shadowsblog.cloud-ip.cc/`	url	profile
`https://shadowbyt3s.8bit.ca/index.php`	url	profile
`https://www.ransomlook.io/group/insomnia`	url	profile
`http://r3keoxye5mki4fqcvlk4hpfqqzxmakchj`	url	profile
`https://www.ransomlook.io/group/cipherfo`	url	profile
`http://22evxpggnkyrxpluewqsrv5j4jtde6hut`	url	profile
`http://o3ydbkayttkyg4iw2nc732jxmmex25bje`	url	profile
`http://scbrksw5fgjtujc2ah42roo6bij2unr2t`	url	profile
`http://scbrksw5fgjtujc2ah42roo6bij2unr2t`	url	profile
`https://www.ransomlook.io/group/blackfie`	url	profile
`http://xcou7t6a4qlecsr7ipmxlwsseghxbebql`	url	profile
`https://www.ransomlook.io/group/monolock`	url	profile
`https://mlock.tel/`	url	profile
`https://www.ransomlook.io/group/bravox`	url	profile
`http://bravoxxwcfz5qk43ychgveprpd5mw5hvx`	url	profile
`http://bravoxxtrmqeeevhl7gdh2yzvlrjxajr6`	url	profile
`https://www.ransomlook.io/group/clearwat`	url	profile
`http://b6rgpykvtyqah4q5tii25ouevr5g3u2s7`	url	profile
`https://www.ransomlook.io/group/aware`	url	profile
`http://ui2uleaiisccbtcooyi34cy5u3plpd5wr`	url	profile
`https://www.ransomlook.io/group/orion`	url	profile
`http://cjfntkj5qeizxowuy3srceg7zo6namc3k`	url	profile
`https://www.ransomlook.io/group/fletchen`	url	profile
`https://www.ransomlook.io/group/shinyhun`	url	profile
`https://91.215.85.103/`	url	profile
`https://176.120.22.24/`	url	profile
`https://91.202.233.104/`	url	profile
`https://shinyhunte.rs/`	url	profile
`http://91.215.85.22/`	url	profile
`http://toolatedhs5dtr2pv6h5kdraneak5gs3s`	url	profile
`https://www.ransomlook.io/group/0apt`	url	profile
`https://www.ransomlook.io/group/lynxr`	url	profile
`https://www.ransomlook.io/group/waissbei`	url	profile
`http://syympi25sxgm55kyk5wkktns2why6q3ub`	url	profile
`http://samu747og2fgxujardbhkp5f5dkoprzye`	url	profile
`https://www.ransomlook.io/group/cipherwo`	url	profile
`http://b63zgpxrwqttrr6ti3jvvezqdzahuirkk`	url	profile
`https://www.ransomlook.io/group/benzona`	url	profile
`http://wor3mnvotoznof5puzoa35y4bwgtozqe3`	url	profile
`http://cpjhb63lxycwbyus2n35ddyhdzxhf756l`	url	profile
`http://benzona6x5ggng3hx52h4mak5sgx5vukr`	url	profile
`http://rwsu75mtgj5oiz3alkfpnxnopcbiqed6w`	url	profile
`https://www.ransomlook.io/group/sicari`	url	profile
`http://sicarinb4ktqcdpubjifzw3vixvzgtwac`	url	profile
`http://sicariktdbhjtrk6f2pwdh6wlequw7pcj`	url	profile
`http://sicari7m63wlggfxajiuonfsk72fgencn`	url	profile
`http://sicarilxx2br6esqnhad4w26bcgb5j2sn`	url	profile
`http://sicariifoucvhyqg54smi3esg5sfcyw5z`	url	profile
`https://www.ransomlook.io/group/tridentl`	url	profile
`https://www.ransomlook.io/group/minteye`	url	profile
`https://www.ransomlook.io/group/kazu`	url	profile
`http://6czlbd2jfiy6765fbnbnzuwuqocg57ebv`	url	profile
`http://darkshiz4d5ayumjvgbdhchwc7oeuc5jg`	url	profile
`https://www.ransomlook.io/group/cry0`	url	profile
`http://pwn3dky35tub4ktj5bolc72oezg6qc3jv`	url	profile
`http://cryoblogedawivdcknyd4jsjxkrx3xrqq`	url	profile
`https://www.ransomlook.io/group/osiris`	url	profile
`https://osirisbm3357xrccnid23nlyuqwzbgqh`	url	profile
`https://osirisbm3357xrccnid23nlyuqwzbgqh`	url	profile
`http://ausare.net`	url	profile
`https://osirisbm3357xrccnid23nlyuqwzbgqh`	url	profile
`https://www.ransomlook.io/group/rustyloc`	url	profile
`http://rustyzoc5hc2mre56ug7lacant25o2gep`	url	profile
`http://rustywua527xyupr5vqqaigvjgnkvibp3`	url	profile
`http://rustyvkrpehhq7x2ellti6oa43mwwvdps`	url	profile
`http://rustyunet6zp35koogizqixpnn66fcz6i`	url	profile
`http://rustyshyjstdvkiffwl4pif7f6jrpzmhc`	url	profile
`http://rustyr2t5slcn66cnbiawdmledjyog5yw`	url	profile
`http://rustypiwiusst2zptoervivs4x3i2vvab`	url	profile
`http://rustynosqxg6f4rurkfj5qjplvcxgmxcq`	url	profile
`http://rustyi5lcri2qaulc4g3l3itk6h4q47bu`	url	profile
`http://rustyfso7zdjlhf3ukdj34pvq6gjnlz3c`	url	profile
`http://rustye6pskjsu5vo2wlxg24ir3esf6jzc`	url	profile
`http://rustyb2uj3aceqsouwei6rgrwvcpnwv7w`	url	profile
`http://rustydl5ak6p6ajqnja6qzkxvp5huhe4o`	url	profile
`https://www.ransomlook.io/group/root`	url	profile
`https://www.ransomlook.io/group/spirigat`	url	profile
`https://www.ransomlook.io/group/ms13-089`	url	profile
`http://chatmsuppxeoma533636ga3g5k56wlyl3`	url	profile
`http://msleakjir7pxbe6onlqe5uwgvdmy6nq4m`	url	profile
`https://www.ransomlook.io/group/fulcrums`	url	profile
`http://fulcrumsec.vg/`	url	profile
`http://4e3p3in2bl67hxchuwza7qvnpe7pyeloy`	url	profile
`http://gsgot6tua7ffammwdv6vpxkog32b4z7qi`	url	profile
`https://www.ransomlook.io/group/genesis`	url	profile
`http://genesis6ixpb5mcy4kudybtw5op2wqlrk`	url	profile
`https://www.ransomlook.io/group/zircon`	url	profile
`http://zircon7g4qp46d3gjhejbgxnqwzebcjqs`	url	profile

MITRE ATT&CK Groups ↗ Ransomware.live ↗ APT Theater →

🏹 Campaigns & malware

Campaigns →Malware families →Nation-State theater →Sanctions →Wanted & Rewards →

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🧭 Intelligence disciplines

CYBINT →OSINT →HUMINT →GEOINT →

Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook