Ransomware Group intelligence
Safepay
ActiveTrack Safepay with 616 published victims and 5 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Safepay is tracked by Breach House as a ransomware group with 616 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Leak Status Distribution
140
- Leaked 0 0.0%
- Pending 139 99.3%
- Deleted 1 0.7%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 5 | Onion service | Up checked 4h ago | safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion |
| Leak location 4 | Onion service | Down checked 4h ago | j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion |
| Leak location 3 | Onion service | Down checked 4h ago | nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion |
| Leak location 2 | Onion service | Down checked 4h ago | cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion |
| Leak location 1 | Onion service | Down checked 4h ago | nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion |
Top Activity Sectors (16)
- Not identified 144
- Communication / Marketing 93
- Manufacturing / Engineering 54
- Services 38
- Construction / Real Estate 31
- IT 30
- Healthcare / Pharma 28
- Finance / Legal / Insurance 27
- Education 25
- Retail / E-commerce 22
- Agriculture / Food 15
- Transportation / Travel / Logistics 14
- Public Sector 13
- Hospitality / Food & Beverage / Tourism 12
- NGOs / Associations 9
- Energy 4
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Safepay, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: safepay executes PowerShell scripts to run payload logic, disable defenses, and stage ransomware components.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: safepay uses registry run keys and startup folders to maintain persistence after reboot.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: safepay disables or modifies security tools such as antivirus and monitoring agents to prevent detection and cleanup.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1688 Safe Mode Boot Defense Impairment
What they do: safepay attempts safe mode boot manipulation to disrupt recovery workflows and evade host-based defenses.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1027.016 Junk Code Insertion Stealth
What they do: safepay inserts junk code into binaries to evade static analysis and signature-based detection.
What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
-
T1070.004 File Deletion Stealth
What they do: safepay deletes Volume Shadow Copies and temporary files to eliminate recovery options and reduce forensic traces.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1135 Network Share Discovery Discovery
What they do: safepay uses network share discovery to locate victim file shares and staging directories for encryption targets.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: safepay moves laterally through SMB/Windows Admin Shares to encrypt additional systems across the network.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: safepay encrypts victim files and backups using its ransomware payload to maximize impact and extortion leverage.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1491.001 Internal Defacement Impact
What they do: safepay performs internal defacement by replacing or corrupting victim files to demonstrate impact and pressure victims.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (8)
▼Software Safepay has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Discovery
Invoke-ShareFinder
Exfiltration
FileZilla
7zip
WinRAR
LOLBAS (living-off-the-land binaries)
Regsvr32.exe
CMSTPLUA
dllhost.exe
RMM Tools
Microsoft RDP
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (2)
▼The note this group leaves on a compromised machine. Click a filename to read it.
readme_safepay.txt
Greetings! Your corporate network was attacked by SafePay team. Your IT specialists made a number of mistakes in setting up the security of your corporate network, so we were able to spend quite a long period of time in it and compromise you. It was the misconfiguration of your network that allowed our experts to attack you, so treat this situation as simply as a paid training session for your system administrators. We ve spent the time analyzing your data, including all the sensitive and confidential information. As a result, all files of importance have been encrypted and the ones of most interest to us have been stolen and are now stored on a secure server for further exploitation and publication on the Web with an open access. Now we are in possession of your files such as: financial statements, intellectual property, accounting records, lawsuits and complaints, personnel and customer files, as well as files containing information on bank details, transactions and other internal documentation. Furthermore we successfully blocked most of the servers that are of vital importance to you, however upon reaching an agreement, we will unlock them as soon as possible and your employees will be able to resume their daily duties. We are suggesting a mutually beneficial solution to that issue. You submit a payment to us and we keep the fact that your network has been compromised a secret, delete all your data and provide you with the key to decrypt all your data. WE ARE THE ONES WHO CAN CORRECTLY DECRYPT YOUR DATA AND RESTORE YOUR INFRASTRUCTURE IN A SHORT TIME. DO NOT TRY TO DECRYPT YOUR FILES YOURSELF, YOU WILL NOT BE ABLE TO DO THIS, YOU WILL ONLY DAMAGE THEM AND WE WILL NOT BE ABLE TO RESTORE THEM. In the event of an agreement, our reputation is a guarantee that all conditions will be fulfilled. No one will ever negotiate with us later on if we don't fulfill our part and we recognise that clearly! We are not a politically motivated group and want nothing more than money. Provided you pay, we will honour all the terms we agreed to during the negotiation process. In order to contact us, please use chat below, you have 10 days to contact us, after this time a blog post will be made with a timer for 3 days before the data is published and you will no longer be able to contact us. To contact us follow the instructions: Install and run Tor Browser from https://www.torproject.org/download/ Go to http://dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onion Reserve Link: http://oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onion Log in with ID: [snip] Contact and wait for a reply, we guarantee that we will reply as soon as possible, and we will explain everything to you once again in more detail. Our blog: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion http://nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion Our TON blog: tonsite://safepay.ton You can connect through your Telegramm account.
readme_safepay_ascii.txt
Greetings! Your corporate network was attacked by SafePay team. Your IT specialists made a number of mistakes in setting up the security of your corporate network, so we were able to spend quite a long period of time in it and compromise you. It was the misconfiguration of your network that allowed our experts to attack you, so treat this situation as simply as a paid training session for your system administrators. We ve spent the time analyzing your data, including all the sensitive and confidential information. As a result, all files of importance have been encrypted and the ones of most interest to us have been stolen and are now stored on a secure server for further exploitation and publication on the Web with an open access. Now we are in possession of your files such as: financial statements, intellectual property, accounting records, lawsuits and complaints, personnel and customer files, as well as files containing information on bank details, transactions and other internal documentation. Furthermore we successfully blocked most of the servers that are of vital importance to you, however upon reaching an agreement, we will unlock them as soon as possible and your employees will be able to resume their daily duties. We are suggesting a mutually beneficial solution to that issue. You submit a payment to us and we keep the fact that your network has been compromised a secret, delete all your data and provide you with the key to decrypt all your data. WE ARE THE ONES WHO CAN CORRECTLY DECRYPT YOUR DATA AND RESTORE YOUR INFRASTRUCTURE IN A SHORT TIME. DO NOT TRY TO DECRYPT YOUR FILES YOURSELF, YOU WILL NOT BE ABLE TO DO THIS, YOU WILL ONLY DAMAGE THEM AND WE WILL NOT BE ABLE TO RESTORE THEM. In the event of an agreement, our reputation is a guarantee that all conditions will be fulfilled. No one will ever negotiate with us later on if we don't fulfill our part and we recognise that clearly! We are not a politically motivated group and want nothing more than money. Provided you pay, we will honour all the terms we agreed to during the negotiation process. In order to contact us, please use chat below, you have 10 days to contact us, after this time a blog post will be made with a timer for 3 days before the data is published and you will no longer be able to contact us. To contact us follow the instructions: Install and run Tor Browser from https://www.torproject.org/download/ Go to http://dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onion Reserve Link: http://oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onion Log in with ID: [snip] Contact and wait for a reply, we guarantee that we will reply as soon as possible, and we will explain everything to you once again in more detail. Our blog: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion http://nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion Our TON blog: tonsite://safepay.ton You can connect through your Telegramm account.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (616)
Search, filter and paginate the victim timeline for Safepay. Showing 301–400 of 616.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | osdcourtks.org id22312 View details | United States | Public Sector | — | ||
|
The domain osdcourtks.org appears to belong to the Osage County District Court in Kansas. As part of Kansas’s Fourth Judicial … |
||||||
| Ransomware | waverlychildcare.org id22263 View details | United States | Communication / Marketing | — | ||
|
Waverly Child Care & Preschool is a nonprofit early childhood education provider based in Waverly, Iowa, established in 1970. It … |
||||||
| Ransomware | bthcpa.com id22082 View details | United States | Finance / Legal / Insurance | — | ||
|
BTH CPA is a professional accounting and advisory firm based in the United States, offering a full range of financial … |
||||||
| Ransomware | kclub.ie id22081 View details | Ireland | Hospitality / Food & Beverage / Tourism | pending | ||
|
The K Club is a luxury resort and golf destination located in County Kildare, Ireland. Known for its five-star accommodations, … |
||||||
| Ransomware | usai.io id22080 View details | United States | IT | — | ||
|
USAI is a U.S.-based artificial intelligence and technology solutions provider. The company develops AI-driven platforms and software designed to optimize … |
||||||
| Ransomware | wilsonatllaw.com id22079 View details | United States | Finance / Legal / Insurance | — | ||
|
Wilson AT Law is a U.S.-based legal practice specializing in areas such as personal injury, family law, estate planning, and … |
||||||
| Ransomware | scottschiff.com id22078 View details | United States | Finance / Legal / Insurance | — | ||
|
Scott Schiff & Associates is a U.S.-based law firm located in Columbus, Ohio, with a specialization in personal injury and … |
||||||
| Ransomware | mdneal.com id22077 View details | United States | Manufacturing / Engineering | pending | ||
|
M.D. Neal Engineering is an American engineering consulting company specializing in structural engineering, design, and project management. The firm provides … |
||||||
| Ransomware | umweltprofis.at id22074 View details | Austria | Communication / Marketing | — | ||
|
Umweltprofis is an Austrian company specializing in environmental management, waste disposal, and recycling solutions. It provides sustainable services for municipalities, … |
||||||
| Ransomware | waterfordsurgicalcenter.com id22073 View details | United States | Healthcare / Pharma | — | ||
|
Waterford Surgical Center is a specialized healthcare facility in the United States dedicated to outpatient surgical care. The center provides … |
||||||
| Ransomware | oiwky.com id22072 View details | United States | Services | — | ||
|
Oiwky is a U.S.-based technology and innovation company focused on providing IT solutions, digital platforms, and business support services. The … |
||||||
| Ransomware | sandersonmanagement.com id22052 View details | United States | Services | — | ||
|
Sanderson Management is a renowned property management company based in the United States, specializing in the efficient and effective management … |
||||||
| Ransomware | lipcare.de id22043 View details | Germany | Other | — | ||
|
Lipcare, operated by KHK GmbH in Germany, is a specialized manufacturer of natural and conventional cosmetics, with a particular focus … |
||||||
| Ransomware | companionsandhomemakers.com id22042 View details | United States | Communication / Marketing | — | ||
|
Companions & Homemakers, based in Connecticut, is a nonprofit home-care service provider with more than 30 years of experience. It … |
||||||
| Ransomware | camaravalencia.com id22041 View details | Spain | Retail / E-commerce | — | ||
|
The Cámara de Valencia, officially known as the Chamber of Commerce, Industry, Services and Navigation of Valencia, was founded in … |
||||||
| Ransomware | dasmeshschool.com id22040 View details | Canada | Education | — | ||
|
Dasmesh Punjabi School in Winnipeg, Manitoba, is a private independent institution that integrates the provincial curriculum with Punjabi language, Sikh … |
||||||
| Ransomware | zanettisrl.it id22039 View details | Italy | Construction / Real Estate | — | ||
|
Zanetti S.r.l., headquartered in Florence, Italy, is a leading architectural company specializing in the design and construction of glass and … |
||||||
| Ransomware | uwock.ca id22038 View details | Canada | Communication / Marketing | — | ||
|
Information Chatham-Kent is a nonprofit service based in Ontario, Canada, and operated under United Way Chatham-Kent. It serves as a … |
||||||
| Ransomware | hardwicktactical.com id22037 View details | United States | Communication / Marketing | pending | ||
|
Hardwick Tactical Corporation, located in Cleveland, Tennessee, is a historic American manufacturer of military and professional uniforms. Founded in 1880, … |
||||||
| Ransomware | templeemanu-el.org id22036 View details | United States | Other | — | ||
|
Temple Emanu-El, located in Dallas, Texas, is one of the largest and most historically significant Reform Jewish congregations in the … |
||||||
| Ransomware | thecelestehotel.com id22035 View details | United States | Hospitality / Food & Beverage / Tourism | — | ||
|
The Celeste Hotel is a boutique hotel located in Orlando, Florida, within the University of Central Florida (UCF) campus area. … |
||||||
| Ransomware | decor-metall.de id21999 View details | Germany | Manufacturing / Engineering | pending | ||
|
Founded in 1963 and based in Bad Salzuflen, Germany, decor metall GmbH is a globally recognized specialist in point-of-sale (POS) … |
||||||
| Ransomware | akd-ekbo.de id21950 View details | Germany | Education | — | ||
|
The Amt für kirchliche Dienste (AKD) is the central continuing education institution for professional and volunteer staff of the Evangelical … |
||||||
| Ransomware | jphrs-waghaeusel.de id21949 View details | Germany | Education | — | ||
|
Johann-Peter-Hebel Realschule, located in Waghäusel, Baden-Württemberg, is a German secondary school offering intermediate-level education for students aged approximately 10 to … |
||||||
| Ransomware | parksidegroup.co.uk id21948 View details | United Kingdom | Communication / Marketing | — | ||
|
Parkside Group Ltd is a respected UK-based manufacturer and distributor of architectural-grade aluminium systems, operating under its prominent Comar brand. … |
||||||
| Ransomware | ferienwohnungen.de id21947 View details | Germany | Transportation / Travel / Logistics | pending | ||
|
Ferienwohnungen.de is a German online booking platform that connects travelers to over 77,000 holiday homes and apartments across Europe. Operated … |
||||||
| Ransomware | phillips66lubricants.com id21946 View details | United States | Manufacturing / Engineering | — | ||
|
hillips 66 Lubricants is a leading U.S.-based manufacturer and supplier of industrial and automotive lubricants. As part of the larger … |
||||||
| Ransomware | faltner.de id21945 View details | Germany | Agriculture / Food | — | ||
|
Faltner GmbH, established in 1946, is a German provider based in Büchlberg that specializes in agricultural and forestry equipment, as … |
||||||
| Ransomware | optivosa.com id21944 View details | Mexico | Communication / Marketing | — | ||
|
Optivosa is a wholesale distributor located in Mérida, Yucatán, that provides a wide array of products for stationery stores, offices, … |
||||||
| Ransomware | rivertoncabinets.com id21943 View details | United States | Other | — | ||
|
Riverton Cabinet Company is a U.S.-based custom cabinetry firm in New Lenox, Illinois, known for its craftsmanship and personalized design … |
||||||
| Ransomware | schliessmeyer.de id21942 View details | Germany | Manufacturing / Engineering | — | ||
|
SCHLIESSMEYER GmbH, part of the Ernst Plastics Group and based in Zweibrücken, Germany, specializes in plastic injection molding. The company … |
||||||
| Ransomware | childrenscouncil.org id21837 View details | United States | Public Sector | — | ||
|
Children’s Council of San Francisco is a nonprofit organization with over 50 years of experience advocating for and facilitating high-quality … |
||||||
| Ransomware | albertaindustrialcontrols.com id21826 View details | Canada | Manufacturing / Engineering | pending | ||
|
Alberta Industrial Controls & Drives Inc., based in Edmonton, Alberta, is a reputable distributor of industrial electronic controls and motors … |
||||||
| Ransomware | listgrove.com id21825 View details | United Kingdom | Other | pending | ||
|
Listgrove Limited is a specialist recruitment and HR consultancy headquartered in Stratford-upon-Avon, England. Founded in 1975, the firm focuses on … |
||||||
| Ransomware | transelectric.co.il id21824 View details | Israel | Manufacturing / Engineering | — | ||
|
TransElectric, part of the Israeli Trans Innovation Group (TIG), is a value-add distributor of electronic components and electro-mechanical solutions. Based … |
||||||
| Ransomware | batemangroundworks.co.uk id21823 View details | United Kingdom | Manufacturing / Engineering | — | ||
|
Bateman Groundworks Ltd, headquartered in Norwich, East Anglia, is a leading civil engineering and groundworks contractor. Active since 1997, Bateman … |
||||||
| Ransomware | godbyhearth.com id21822 View details | United States | Communication / Marketing | — | ||
|
Operating in Indianapolis and Carmel, Indiana, Godby Hearth & Home is a premium provider of home comfort solutions with origins … |
||||||
| Ransomware | mauilodging.com id21628 View details | United States | Communication / Marketing | — | ||
|
[AI generated] MauiLodging.com is a property rental service company based in Maui, Hawaii. This firm specializes in providing a wide range of accommodation options as per user requirements, from luxury villas to economical vacation rentals. Tailored to cater to the varying needs of tourists, the firm assures quality amenities, scenic locations, and personalized customer services, making the trip to the island unforgettable. |
||||||
| Ransomware | ridgefield.org id21539 View details | United States | Education | — | ||
|
[AI generated] "Ridgefield.org" represents Ridgefield public schools in Ridgefield, Connecticut. It is a holistic platform providing comprehensive information about the school district, including individual public schools within the district. The site offers resources, news, and updates to students, parents, teachers, and staff, covering academics, sports, arts, and other school-related activities. |
||||||
| Ransomware | chamberlainhuckeriede.com id21492 View details | United States | Services | — | ||
|
[AI generated] Chamberlain Huckeriede Funeral Home is a family-owned and operated business based in Lima, Ohio. They've been serving the community for over 100 years, offering a range of services including traditional funerals, cremations, and pre-planned funerals. They are known for providing compassionate and personalized services tailored to the individual needs of each family. |
||||||
| Ransomware | ingrammicro.com id21420 View details | United States | IT | — | ||
|
[AI generated] Ingram Micro is a global technology and supply chain services provider. The company, established in 1979, offers a broad range of solutions and services to businesses around the globe, including cloud, mobility, supply chain, and technology solutions. It serves markets including IT, telecommunications, consumer electronics, and others. |
||||||
| Ransomware | tele-optics.com id21390 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | appsnw.com id21389 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | wta-inc.com id21388 View details | United States | Transportation / Travel / Logistics | — | ||
|
[AI generated] Worldwide Travel Adventures, Inc. (WTASi) is a global travel agency specializing in customized travel packages for independent travelers. The company provides destination expertise and personalizes travel services to exotic destinations across the globe. The services include accommodation arrangements, flights booking, ground transportation, and exclusive tours. WTASi is known for its intimate knowledge of the locations and personalized services. Note: Please check the company's website for the most current information. |
||||||
| Ransomware | bussepc.com id21387 View details | Germany | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | swfldermatology.com id21386 View details | United States | Healthcare / Pharma | — | ||
|
[AI generated] Southwest Florida Dermatology is a professional healthcare practice offering a range of skin care services. Their team of certified dermatologists and skin care specialists provide treatments for various skin conditions including acne, psoriasis, eczema and skin cancer. They also offer cosmetic dermatology services like Botox, fillers, and laser treatments. It is dedicated to offering high-quality patient care in a compassionate environment. |
||||||
| Ransomware | havtechpa.com id21385 View details | United States | IT | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | appagroup.com id21384 View details | Germany | Construction / Real Estate | — | ||
|
[AI generated] Appa Group is an engineering and construction company that specializes in the engineering, procurement, and construction (EPC) of industrial plants and commercial buildings. They deal with varied sectors including oil & gas, petrochemical, power, infrastructure, and more. The company undertakes each aspect of the construction process in-house to ensure seamless delivery. |
||||||
| Ransomware | briar-group.com id21383 View details | United States | Hospitality / Food & Beverage / Tourism | — | ||
|
[AI generated] The Briar Group is a Boston, MA based hospitality company known for its commitment to great food, excellent service, and exceptional design and ambiance. The family-owned company operates a portfolio of various dining establishments, including bars, pubs, and restaurants all over the Boston area. From traditional Irish pubs to modern American eateries, the Briar Group offers diverse dining experiences. |
||||||
| Ransomware | teamsignal.com id21382 View details | United States | Communication / Marketing | — | ||
|
[AI generated] "Teamsignal" is an employee engagement and ground intelligence platform for teams and organizations. It facilitates upward communication from staff to management and leadership, allowing organizations to gain real-time insights into performance, morale, and workplace climate. Teamsignal uses a data-driven approach to enhance employee wellbeing and boost productivity. Its core features include regular pulse surveys, data analytics, and comprehensive dashboard visualizations. |
||||||
| Ransomware | blueridgesl.com id21325 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | rhschool.org id21324 View details | United States | Education | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | qtmi.net id21323 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | horanbarker.com id21322 View details | United States | Hospitality / Food & Beverage / Tourism | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | naxis.net id21321 View details | Japan | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | landwwilson.co.uk id21320 View details | United Kingdom | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | salemma.com.py id21319 View details | Paraguay | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | stichtingjohannesbosco.com id21318 View details | Netherlands | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | bisa.com.pe id21317 View details | Peru | Services | — | ||
|
[AI generated] BISA, or Bio-Servicios Ambientales, is a Peruvian company specialized in environmental consulting. Founded in 1992, it provides businesses with guidance on environmental management, offering services that encompass environmental impact assessments, soil studies, water management and recovery programmes for degraded areas. It primarily serves the mining sector, but also works with other industries. |
||||||
| Ransomware | norpak.com id21239 View details | Canada | Communication / Marketing | — | ||
|
[AI generated] Norpak is a leading provider of industrial packaging solutions, offering a wide range of products including stretch films, strapping, tapes, protective packaging, food packaging, and machinery. They pride themselves on delivering superior quality products and services for every packaging need. In operation for over 35 years, they cater to both small and large-scale businesses. |
||||||
| Ransomware | ashland.k12.ma.us id21206 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | divgroup.eu id21205 View details | Slovakia | Services | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | hlb.ie id21204 View details | Ireland | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | palmasdelixcan.com id21203 View details | Mexico | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | accademia.it id21202 View details | Italy | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | nod.ro id21120 View details | Romania | Other | — | ||
|
[AI generated] "N/A" |
||||||
| Ransomware | bartec.com id21119 View details | Germany | IT | — | ||
|
[AI generated] Bartec Group is a global company known for its innovative solutions in the safety and security field. They specialize in industrial safety technology, focusing on hazardous areas and activities. Their product range includes equipment for mobile data acquisition, data communication, control and automation technology, heating technology, and measurement and analysis technology. |
||||||
| Ransomware | silverdalebc.com id21043 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | chirurgiemaxillo.com id21042 View details | Canada | Other | — | ||
|
Le Dr Nimaat Pertick vous offre des traitements pour les dents de sagesse, les implants dentaires, la greffe osseuse et la chirurgie orthognatique. |
||||||
| Ransomware | lowcostspayneuterindiana.org id21041 View details | United States | Communication / Marketing | — | ||
|
[AI generated] LowCostSpayNeuterIndiana.org is an organization based in Indiana that aims to control the pet population and reduce euthanasia rates by providing affordable spay and neuter services. They cater to cats, dogs, and feral cats, providing medical services like vaccinations, heartworm testing, and microchipping in addition to population control measures. |
||||||
| Ransomware | avgouleaschool.gr id21040 View details | Greece | Education | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | lewis-manning.org.uk id21039 View details | United Kingdom | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | wmat.nsn.us id21038 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | cascobay.org id21037 View details | United States | Communication / Marketing | — | ||
|
[AI generated] Casco Bay is a conservation organization based in Maine, United States. The primary aim of the company is to improve the water quality of the Casco Bay. They conduct research, advocate, and implement protective measures for combatting pollution. Their initiatives include Clean Water Act enforcement, green infrastructure promotion, education programs about pollution prevention, water quality monitoring, and baykeeping for Casco Bay. |
||||||
| Ransomware | profile-ind.com id21036 View details | United States | Communication / Marketing | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | relucent.com id21035 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | fmsarchitects.com id21034 View details | United States | Construction / Real Estate | — | ||
|
[AI generated] FMS Architects, established in 1983, is a UK based architectural firm that is influenced by modernist principles. With experience in educational, commercial, and residential sectors, their architects work closely with clients and co-consultants to deliver bespoke architectural outcomes. Their ambition is to create buildings which optimize spatial potential and minimize environmental impact. They are committed to leading on sustainability within the design and construction industry. |
||||||
| Ransomware | ppa-eng.com.org id21033 View details | Other | — | |||
|
[AI generated] N/A |
||||||
| Ransomware | caredig.co.uk id21032 View details | United Kingdom | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | dossenterprises.com id20928 View details | United States | Communication / Marketing | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | lafayettefamilyymca.org id20927 View details | United States | Communication / Marketing | — | ||
|
[AI generated] The Lafayette Family YMCA is a non-profit community organization based in Lafayette, Indiana. They offer a wide range of programs such as youth development, healthy living, and social responsibility initiatives. Programs include child care, fitness training, swimming lessons, summer camps, and more. The Lafayette YMCA strives to nurture the potential of every kid, promote healthy living, and foster a sense of social responsibility. |
||||||
| Ransomware | jansen-aschendorf.de id20926 View details | Germany | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | tdunhamcpa.com id20809 View details | United States | Communication / Marketing | — | ||
|
[AI generated] "tdunhamcpa.com" represents the online presence of Tracy Dunham, a Certified Public Accountant (CPA) based in Jackson, Wyoming. She specializes in tax preparation, planning, and representation for small business owners, individuals, estates, and trusts. Her services also extend to bookkeeping, payroll, QuickBooks consulting, and financial planning. |
||||||
| Ransomware | mccn.org id20783 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | mlderm.com id20781 View details | United States | Communication / Marketing | — | ||
|
[AI generated] MLDerm is a beauty product online store specializing in skincare products treating Melasma. It utilizes various technologies to achieve its goal of restoring and maintaining healthy skin. The company prides itself on using scientific research, allowing it to develop effective and safe products. With a team of aesthetics professionals, they provide continuous improvement and new developments in their product line. |
||||||
| Ransomware | membersourcecu.org id20715 View details | United States | Finance / Legal / Insurance | — | ||
|
[AI generated] MemberSource Credit Union is a not-for-profit financial cooperative based in Texas, USA. It provides a wide range of tailored financial services to its members, including savings and checking accounts, consumer loans, credit cards, mortgages, and investment services. It is member-owned and committed to providing competitive rates and fees. |
||||||
| Ransomware | macedonia.oh.us id20708 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | codesco.com id20665 View details | Germany | IT | — | ||
|
[AI generated] "Codesco" is a reputable technology based company specializing in building cutting-edge software solutions. They offer various services including software development, software testing, application management, and consultancy. Their team develops solutions for multiple industries, with a strong focus on enhancing productivity, efficiency, and accuracy. Their continuous innovation and dedication to problem-solving help them shape the future of technology and client businesses. |
||||||
| Ransomware | packagesteel.com id20664 View details | United States | Manufacturing / Engineering | — | ||
|
[AI generated] Package Steel Systems Inc. is a company based in Sutton, Massachusetts, which specializes in designing and fabricating steel buildings. They offer various products, such as custom-engineered buildings, barns, garages, and warehouses. They also provide services such as construction management, building erection services, and pre-construction services. |
||||||
| Ransomware | hohmannoilandplumbing.com id20662 View details | United States | Energy | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | cs-groupllc.com id20661 View details | United States | Services | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | pzsarchitects.com id20660 View details | Finland | Healthcare / Pharma | — | ||
|
[AI generated] PZS Architects is a Philadelphia-based architectural firm that specializes in planning, interior design, and architectural design. With a commitment to sustainable design practices, the company offers a wide range of services across various sectors, including residential, commercial, cultural, educational, and healthcare. PZS Architects combines efficiency, aesthetics, and functionality in every project, aiming to enhance communities through innovative design. |
||||||
| Ransomware | welcometosedgebrook.com id20659 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | moffett-towers-club.com id20658 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | liberty-township.com id20657 View details | United States | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | mcsl.de id20656 View details | Germany | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | rusindustries.com id20655 View details | Russian Federation | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | theoverheaddoorco.com id20654 View details | United States | Communication / Marketing | — | ||
|
[AI generated] The Overhead Door Company is a premier garage door service provider in the US, specializing in residential and commercial garage door installation, maintenance, and repair. Their product line includes a wide range of overhead and garage doors and operators, as well as related accessories. They also offer customizable designs to meet specific aesthetic or functional needs, and are known for their reliability and professional service. |
||||||
| Ransomware | awo-giessen.org id20653 View details | Germany | Other | — | ||
|
[AI generated] N/A |
||||||
| Ransomware | realschule-karlstadt.org id20652 View details | Germany | Other | — | ||
|
[AI generated] N/A |
||||||