Ransomware Group intelligence
Safepay
ActiveTrack Safepay with 595 published victims and 5 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Safepay is tracked by Dark Eye as a ransomware group with 595 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Leak Status Distribution
595
- Leaked 153 25.7%
- Pending 440 73.9%
- Deleted 2 0.3%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 5 | Onion service | Up checked 25m ago | safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion |
| Leak location 2 | Onion service | Down checked 25m ago | cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion |
| Leak location 4 | Onion service | Down checked 26m ago | j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion |
| Leak location 3 | Onion service | Down checked 26m ago | nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion |
| Leak location 1 | Onion service | Down checked 26m ago | nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion |
Top Activity Sectors (17)
- Not identified 146
- Communication / Marketing 94
- Manufacturing / Engineering 60
- Services 43
- IT 36
- Construction / Real Estate 31
- Healthcare / Pharma 29
- Finance / Legal / Insurance 27
- Retail / E-commerce 25
- Education 25
- Agriculture / Food 17
- Public Sector 14
- Transportation / Travel / Logistics 14
- Hospitality / Food & Beverage / Tourism 13
- NGOs / Associations 10
- Energy 4
- null 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Safepay, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: safepay executes PowerShell scripts to run payload logic, disable defenses, and stage ransomware components.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: safepay uses registry run keys and startup folders to maintain persistence after reboot.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: safepay disables or modifies security tools such as antivirus and monitoring agents to prevent detection and cleanup.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1688 Safe Mode Boot Defense Impairment
What they do: safepay attempts safe mode boot manipulation to disrupt recovery workflows and evade host-based defenses.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1027.016 Junk Code Insertion Stealth
What they do: safepay inserts junk code into binaries to evade static analysis and signature-based detection.
What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
-
T1070.004 File Deletion Stealth
What they do: safepay deletes Volume Shadow Copies and temporary files to eliminate recovery options and reduce forensic traces.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1135 Network Share Discovery Discovery
What they do: safepay uses network share discovery to locate victim file shares and staging directories for encryption targets.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: safepay moves laterally through SMB/Windows Admin Shares to encrypt additional systems across the network.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: safepay encrypts victim files and backups using its ransomware payload to maximize impact and extortion leverage.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1491.001 Internal Defacement Impact
What they do: safepay performs internal defacement by replacing or corrupting victim files to demonstrate impact and pressure victims.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (8)
▼Software Safepay has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Discovery
Invoke-ShareFinder
Exfiltration
FileZilla
7zip
WinRAR
LOLBAS (living-off-the-land binaries)
Regsvr32.exe
CMSTPLUA
dllhost.exe
RMM Tools
Microsoft RDP
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Dark Eye.
Ransom Notes (2)
▼The note this group leaves on a compromised machine. Click a filename to read it.
readme_safepay.txt
Greetings! Your corporate network was attacked by SafePay team. Your IT specialists made a number of mistakes in setting up the security of your corporate network, so we were able to spend quite a long period of time in it and compromise you. It was the misconfiguration of your network that allowed our experts to attack you, so treat this situation as simply as a paid training session for your system administrators. We ve spent the time analyzing your data, including all the sensitive and confidential information. As a result, all files of importance have been encrypted and the ones of most interest to us have been stolen and are now stored on a secure server for further exploitation and publication on the Web with an open access. Now we are in possession of your files such as: financial statements, intellectual property, accounting records, lawsuits and complaints, personnel and customer files, as well as files containing information on bank details, transactions and other internal documentation. Furthermore we successfully blocked most of the servers that are of vital importance to you, however upon reaching an agreement, we will unlock them as soon as possible and your employees will be able to resume their daily duties. We are suggesting a mutually beneficial solution to that issue. You submit a payment to us and we keep the fact that your network has been compromised a secret, delete all your data and provide you with the key to decrypt all your data. WE ARE THE ONES WHO CAN CORRECTLY DECRYPT YOUR DATA AND RESTORE YOUR INFRASTRUCTURE IN A SHORT TIME. DO NOT TRY TO DECRYPT YOUR FILES YOURSELF, YOU WILL NOT BE ABLE TO DO THIS, YOU WILL ONLY DAMAGE THEM AND WE WILL NOT BE ABLE TO RESTORE THEM. In the event of an agreement, our reputation is a guarantee that all conditions will be fulfilled. No one will ever negotiate with us later on if we don't fulfill our part and we recognise that clearly! We are not a politically motivated group and want nothing more than money. Provided you pay, we will honour all the terms we agreed to during the negotiation process. In order to contact us, please use chat below, you have 10 days to contact us, after this time a blog post will be made with a timer for 3 days before the data is published and you will no longer be able to contact us. To contact us follow the instructions: Install and run Tor Browser from https://www.torproject.org/download/ Go to http://dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onion Reserve Link: http://oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onion Log in with ID: [snip] Contact and wait for a reply, we guarantee that we will reply as soon as possible, and we will explain everything to you once again in more detail. Our blog: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion http://nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion Our TON blog: tonsite://safepay.ton You can connect through your Telegramm account.
readme_safepay_ascii.txt
Greetings! Your corporate network was attacked by SafePay team. Your IT specialists made a number of mistakes in setting up the security of your corporate network, so we were able to spend quite a long period of time in it and compromise you. It was the misconfiguration of your network that allowed our experts to attack you, so treat this situation as simply as a paid training session for your system administrators. We ve spent the time analyzing your data, including all the sensitive and confidential information. As a result, all files of importance have been encrypted and the ones of most interest to us have been stolen and are now stored on a secure server for further exploitation and publication on the Web with an open access. Now we are in possession of your files such as: financial statements, intellectual property, accounting records, lawsuits and complaints, personnel and customer files, as well as files containing information on bank details, transactions and other internal documentation. Furthermore we successfully blocked most of the servers that are of vital importance to you, however upon reaching an agreement, we will unlock them as soon as possible and your employees will be able to resume their daily duties. We are suggesting a mutually beneficial solution to that issue. You submit a payment to us and we keep the fact that your network has been compromised a secret, delete all your data and provide you with the key to decrypt all your data. WE ARE THE ONES WHO CAN CORRECTLY DECRYPT YOUR DATA AND RESTORE YOUR INFRASTRUCTURE IN A SHORT TIME. DO NOT TRY TO DECRYPT YOUR FILES YOURSELF, YOU WILL NOT BE ABLE TO DO THIS, YOU WILL ONLY DAMAGE THEM AND WE WILL NOT BE ABLE TO RESTORE THEM. In the event of an agreement, our reputation is a guarantee that all conditions will be fulfilled. No one will ever negotiate with us later on if we don't fulfill our part and we recognise that clearly! We are not a politically motivated group and want nothing more than money. Provided you pay, we will honour all the terms we agreed to during the negotiation process. In order to contact us, please use chat below, you have 10 days to contact us, after this time a blog post will be made with a timer for 3 days before the data is published and you will no longer be able to contact us. To contact us follow the instructions: Install and run Tor Browser from https://www.torproject.org/download/ Go to http://dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onion Reserve Link: http://oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onion Log in with ID: [snip] Contact and wait for a reply, we guarantee that we will reply as soon as possible, and we will explain everything to you once again in more detail. Our blog: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion http://nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion Our TON blog: tonsite://safepay.ton You can connect through your Telegramm account.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (595)
Search, filter and paginate the victim timeline for Safepay. Showing 401–500 of 595.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | gruposancristobal.com.mx id20313 View details | Mexico | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | radsports.com id20312 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | schoenundendres.de id20311 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | hennertanklines.com id20310 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | bridgecast.ca id20304 View details | Canada | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | codylawfirm.com id20303 View details | United States | Finance / Legal / Insurance | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | spring-green.com/petbutler.com id20302 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Spring-Green.com / PetButler.com are two distinct services operating under Spring-Green Lawn Care Corp. Spring-Green.com is a lawn care service provider that caters to the needs of residential and commercial lawns since 1977. On the other hand, PetButler.com provides professional pet waste cleanup and removal services to homeowners and community management. |
||||||
| Ransomware | paynecountyok.gov id20301 View details | United States | Public Sector | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | labbeemint.com id20260 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Labbeemint Inc. is a global trader and exporter of mint and related products. It is based in the Yakima Valley, WA, USA. They specialize in providing top-quality mint oils such as peppermint oil and spearmint oil. They are committed to achieving customer satisfaction by providing high-quality products from a sustainable and environmentally friendly business operation. |
||||||
| Ransomware | servicecentermetals.com id20259 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Service Center Metals is a leading producer of extruded aluminum products in the US, headquartered in Prince George, Virginia. The company provides a variety of aluminum billets, rods, bars, pipes, and tubes to manufacturers and service centers. It aims to deliver high-quality products with top-tier customer service, rapid lead times, and competitive prices. |
||||||
| Ransomware | ozarkah2o.com id20258 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] "Ozarkah2o.com" is the official website for Ozarka, a Texas-based company that specializes in providing bottled spring water sourced from three natural springs in Texas, USA. They also provide a home and office delivery service. Their product range includes various sizes of bottled water and refreshing flavored water. Excelled in maintaining purity, hydration, and tradition, the company emphasizes sustainable bottling practices. |
||||||
| Ransomware | gjszlin.cz id20257 View details | Czechia | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | lrcpa.com id20256 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | estudiolm.com.ar id20255 View details | Argentina | Communication / Marketing | pending | ||
|
[AI generated] "estudiolm.com.ar" is an Argentine company that specializes in innovative architectural and engineering solutions. Led by a team of highly skilled professionals, the company offers services such as planning, designing, and project management for residential, commercial, and public projects. They are well recognized for their sustainable and contemporary designs. Their mission is to create spaces that improve quality of life while maintaining a commitment to the environment. |
||||||
| Ransomware | dcbflegal.com id20250 View details | United States | Finance / Legal / Insurance | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | rtblegal.com.au id20249 View details | Australia | Finance / Legal / Insurance | pending | ||
|
[AI generated] "rtblegal.com.au" is an Australian law firm that offers a wide range of legal services. Whether it's commercial litigation, property and development law, family law, employment law, or estate planning, they promise a strategic and cost-effective approach. This experienced team is situated in South Melbourne. |
||||||
| Ransomware | notar-roemer-troisdorf.de id20176 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | rgvengineering.co.uk id20175 View details | United Kingdom | Manufacturing / Engineering | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | servicedecorating.com id20174 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | ctd-dortmund.de id20173 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | planet-itservices.com id20172 View details | India | Services | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | dawg-dok.de id20171 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | proctorlane.com id20170 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | sb-p.de id20169 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | schoene-aussicht-kassel.de id20168 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | greenpac.com.sg id20116 View details | Singapore | Healthcare / Pharma | pending | ||
|
Greenpac.com.sg is the website of Greenpac (S) Pte Ltd, a Singapore-based company that designs and manufactures total packaging solutions. Its offerings focus on protective, innovative, and sustainable packaging for high-value and sensitive industrial, medical, and life-science equipment, serving clients from Singapore. The company is headquartered at 19 Tukang Innovation Drive, Singapore 618301, and presents itself as a specialist in high-mix, low-volume packaging engineered for protection, cost efficiency, and sustainability. In threat-intelligence listings, greenpac.com.sg was recorded as a ransomware victim associated with Safepay. |
||||||
| Ransomware | This entry has been removed following a request from the company. id20233 View details | Singapore | Services | pending | ||
|
Takedown notice of 26 May 2025 - Request #1201 |
||||||
| Ransomware | mylikowines.co.uk id20115 View details | United Kingdom | Retail / E-commerce | pending | ||
|
[AI generated] "Mylikowines.co.uk" is an online wine shop based in the UK that offers a selection of exquisite wines sourced from various countries. They provide an expansive collection of whites, reds, rosés, and sparkling wines. Committed to quality, they ensure each bottle fulfills high standards. Their site also has a blog that discusses various aspects of wine culture. They ship nationwide in the UK, making it easy for wine enthusiasts to access their favorite brands. |
||||||
| Ransomware | ngca.net id20114 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | distribution2.com id20113 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | redsquaredentalcare.com id20112 View details | United Kingdom | Healthcare / Pharma | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | overheadtyler.com id20111 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | clarkmechanicalinc.com id20110 View details | United States | Services | pending | ||
|
[AI generated] Clark Mechanical, Inc. is a mechanical contracting company based in California. They specialize in offering various commercial and industrial heating, ventilation, and air conditioning (HVAC) services. Their services include HVAC design, installation, repairs, and maintenance. They are dedicated to providing quality workmanship and exceptional customer service. They have been in the business for over 25 years. |
||||||
| Ransomware | prais.ro id20109 View details | Romania | Communication / Marketing | pending | ||
|
[AI generated] "Prais.ro" is a digital platform from Romania that offers access to a wide variety of services such as web design, e-commerce solutions, mobile applications, and more. They specialize in creating customized digital solutions for businesses of all sizes. Their team of experienced professionals seeks to help clients improve their online presence and expand their customer base through tailored digital strategies. |
||||||
| Ransomware | aplusmachining.com id20108 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] A Plus Machining is a US-based company that specializes in precision CNC (Computer Numerical Control) machining. They handle an assortment of metals and plastics, providing services such as milling, turning, surface grinding, and wire EDM. Known for their high-quality services, they serve industries like aerospace, automotive, medical, and more. Their customer-focused approach ensures end products meet specific needs. |
||||||
| Ransomware | freudenberg-cranes.com id20105 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | zvaonline.com id20093 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | olympusaero.com id20029 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Olympus Aero Group is an international aerospace company that specializes in sourcing and supplying aftermarket, commercial and regional aircraft engines, as well as aircraft engine material. They also provide strategic engine leasing, engine trading and engine material consignment services. Their partnerships cover a global network of airlines, maintenance providers, lessors and traders. |
||||||
| Ransomware | azpiaran.com id20028 View details | Spain | IT | pending | ||
|
Inicio | Azpiaran - The group specializes in Progressive stamping, Fine Blanking, Transfer stamping and Forming technology, azpiaran, Fine Blanking, Progressive stamping, Transfer stamping and Forming technology |
||||||
| Ransomware | wnyenergy.com id20027 View details | United States | Energy | pending | ||
|
[AI generated] WNY Energy is an energy company based in Western New York, USA. It operates a 115 million gallon per year ethanol plant that produces clean-burning, renewable fuel and various byproducts including CO2 and wet and dry distillers grain that are used in food and feed products. The company focuses on innovative technology and practices for transforming local corn into efficient, sustainable biofuels. |
||||||
| Ransomware | moorecoal.com id19979 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | igpi.co.jp id19978 View details | Japan | Services | pending | ||
|
[AI generated] IGPI (Industrial Growth Platform, Inc.) is a Tokyo-based management consulting firm. The company offers assistance in operational improvement, M&A strategies, business turnaround, and global expansion. They cater to businesses in various industries including healthcare, manufacturing, and technology. Promoting growth for their client companies is their primary aim. |
||||||
| Ransomware | kize-weisser-stein.de id19977 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | lifesafeservices.com id19976 View details | United States | Services | pending | ||
|
[AI generated] Lifesafe Services specializes in providing a comprehensive range of safety solutions to both commercial and government outlets. Their services include life-saving equipment, safety training, preventive maintenance & repair services, corporate compliance, and safety program management. They cater to various markets including education, hospitality, construction, healthcare and more. Their aim is to create a safe working environment for their clients. |
||||||
| Ransomware | gravelec.ch id19975 View details | Switzerland | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | abfiad.nl id19974 View details | Netherlands | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | join-the-quest.co.uk id19973 View details | United Kingdom | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | maxusgroup.com id19972 View details | Hong Kong | Services | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | hagemann-h.de id19971 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | metten-maas.de id19970 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | scheuerle-stuttgart.de id19969 View details | Germany | Transportation / Travel / Logistics | pending | ||
|
[AI generated] Scheuerle Stuttgart is a leading company in the heavy transport industry. Based in Stuttgart, Germany, it specializes in producing vehicles for the transportation of heavy and special loads. Their portfolio includes modular transporters, self-propelled modular transporters (SPMTs), and industrial and shipyard transporters. Scheuerle Stuttgart is globally recognized for its innovative solutions, advanced design, and robust machinery, serving various industries including construction and logistics. |
||||||
| Ransomware | gewandhaus.bayern id19968 View details | Germany | Communication / Marketing | pending | ||
|
[AI generated] "Gewandhaus.bayern" is a company based in Munich, Germany, specializing in the provision of high-end designer fashion and accessories. They offer a wide range of products from renowned luxury designers globally. Aside from physical shopping, the company also offers online services. The company promises authenticity in all its products while providing exclusive shopping experience to customers. |
||||||
| Ransomware | morricetransportation.com id19967 View details | United States | Transportation / Travel / Logistics | pending | ||
|
[AI generated] Morrice Transportation is a well-established logistics and transportation company based in Windsor, Ontario, Canada. The company provides ground freight transportation services across North America. They offer a range of services including cross-border shipping, expedited service, and hazardous materials hauling. Morrice Transport utilizes a fleet of over 300 pieces of equipment to deliver solutions for transport challenges. |
||||||
| Ransomware | eu-rec.de id19779 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | schapmann id19778 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | dosjm.com id19777 View details | Hong Kong | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | biglevel.net id19776 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | bloomfamilyeyesurgeons.com id19775 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] "Bloom Family Eye Surgeons is a leading ophthalmology practice located in Newport News, Virginia. The company focuses on providing comprehensive eye care services including eye examinations, cataract surgery, glaucoma care, diabetic eye care, contact lens fitting, and emergency eye care. The experienced team of eye surgeons and optometrists are committed to helping patients improve and maintain their vision through various advanced treatments and procedures." |
||||||
| Ransomware | kolpa.com.pe id19774 View details | Peru | Communication / Marketing | pending | ||
|
[AI generated] "Kolpa.com.pe" is an online marketplace based in Peru. They focus on promoting the sale of products from local producers and artisans throughout the country. Their range encompasses a wide variety of goods, including food, decorative items, clothing and accessories, with an emphasis on authentic, handcrafted items that showcase the diverse cultural heritage of Peru. |
||||||
| Ransomware | dreng.com id19773 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | mooregiles.com id19772 View details | United States | Healthcare / Pharma | pending | ||
|
[AI generated] Moore & Giles is a Virginia-based company specializing in the design and distribution of high-quality leather and luxury home furnishings. Founded in 1933, they collaborate with tanneries worldwide. The company not only serves the high-end residential, hospitality and aviation markets, but also offers handbags, luggage and accessories in its product line. They are known for innovative designs and commitment to environmental accountability. |
||||||
| Ransomware | itec-gmbh.com id19218 View details | Germany | Construction / Real Estate | pending | ||
|
[AI generated] ITEC GmbH is a German-based company specializing in civil engineering and construction. They offer expertise in project management, planning, supervision and construction services for both private and public sectors. Their scope of service includes roads, bridges, infrastructure and environmental development. The team’s professionals ensure compliance with safety, budgetary, and performance standards. |
||||||
| Ransomware | heinrich-steinhardt.de id19217 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | hurst-schroeder.de id19216 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | helixtools.co.uk id19215 View details | United Kingdom | Communication / Marketing | pending | ||
|
[AI generated] Helix Tools provides high-quality tooling solutions for the engineering industry. Located in the UK, the company specializes in offering a wide range of tools including, but not limited to, drill bits, end mills, threading tools, and milling tools. They pride themselves on their comprehensive selection, exceptional customer service, and competitive pricing. |
||||||
| Ransomware | heilbronn.de id19214 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | getriebetech.de id19213 View details | Germany | IT | pending | ||
|
[AI generated] "Getriebetech.de" is based in Germany and functions as a provider of exceptional transmission technology services. Their offer ranges from automatic, manual, CVT to DSG transmissions. Their team of expert engineers conduct comprehensive repairs and maintenance on these transmissions. They pride themselves on delivering quality workmanship, using cutting-edge equipment for diagnostics and resolution of complex transmission issues. They serve both private car owners and partners in the automotive industry. |
||||||
| Ransomware | kirkel.de id19212 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | extremefire.com.au id19211 View details | Australia | Communication / Marketing | pending | ||
|
[AI generated] Extreme Fire Solutions is an Australian company that specializes in fire protection services. They are experts in designing, installing, and maintaining fire safety systems. They provide a wide range of services including fire sprinkler systems, fire extinguisher supply and maintenance, fire detection and alarm systems, and fire safety training. |
||||||
| Ransomware | foerster-schwanau.de id19210 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | eichele-bau.de id19209 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | frapack.de id19208 View details | Germany | Manufacturing / Engineering | pending | ||
|
[AI generated] Frapack.de is a German company specialized in the distribution and production of packaging materials. Their product range includes plastic and paper packaging, bags, industrial packaging materials, and packaging for food & beverages. They cater to both large-scale industrial needs and smaller commercial requirements. They're dedicated to providing sustainable, high-quality, custom packaging solutions for various industries. |
||||||
| Ransomware | niemann.de id19205 View details | Germany | Communication / Marketing | pending | ||
|
[AI generated] Niemann.de is a German company known as Niemann Möbelteile, which translates to Niemann Furniture Parts. Niemann.de manufactures high-quality surfaces and board materials, mainly distributing its products for interior and furniture design practices. It provides a variety of design options including high gloss and super matte finishes amongst others. |
||||||
| Ransomware | creativeunited.org.uk id18835 View details | United Kingdom | Communication / Marketing | pending | ||
|
[AI generated] Creative United is a UK-based community interest company committed to supporting the growth and development of the creative and cultural sectors. Through a range of tailored financial and business services like affordable loans, growth advice, and business skills workshops, they aim to help businesses grow and to foster cultural production, bringing creativity to the heart of local communities. |
||||||
| Ransomware | brightonaustralia.com.au id18834 View details | Australia | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | tieraerzte-warburg.de id18833 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | system-toolsgmbh.de id18832 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | vinylvisions.com id18831 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Vinyl Visions is a company that specializes in the manufacture of premium plastic extrusions for the window, door, and fence industries. They offer products like window trims, patio door trims, and fence rail profiles. Based in Prescott Valley, Arizona, their products are made in the USA. The company prides itself on providing excellent customer service and superior product quality, crafted with meticulously developed and executed designs. |
||||||
| Ransomware | estilointeriors.co.uk id18830 View details | United Kingdom | Healthcare / Pharma | pending | ||
|
[AI generated] "Estilo Interiors" is a UK-based company that specializes in office design and refurbishment. Their services include full office fit-outs, interior design, and space planning for commercial spaces. They handle every stage of the office refurbishment from the initial concept to the finished product, catering to various sectors such as hospitality, retail, and health. |
||||||
| Ransomware | swr.school id18829 View details | Germany | Education | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | albrecht-partner-steuerberatung.de id18828 View details | Germany | Communication / Marketing | pending | ||
|
[AI generated] Albrecht & Partner Steuerberatung is a German Tax Advisory company headquartered in Frankfurt. With expertise in accounting, auditing, and tax services, the company largely caters to small and medium-sized enterprises, assisting them in tax planning and compliance. They prioritize individual consultations, tailored solutions, and personal service for their clients. The firm prides itself on its competence, commitment, and the continuity of its client relationships. |
||||||
| Ransomware | alpsteel.com id18827 View details | Türkiye | Manufacturing / Engineering | pending | ||
|
[AI generated] "AlpSteel.com" is an online platform for one of the leading steel and metal distributors, AlpSteel. Their products include a wide range of steel materials for various industries, such as construction, automotive, shipping, and others. They focus on providing high-quality products alongside efficient delivery services. Their offerings include stainless steel, carbon steel, copper, brass, aluminum, and more. |
||||||
| Ransomware | blunk-gmbh.de id18826 View details | Germany | Agriculture / Food | pending | ||
|
[AI generated] Blunk GmbH is a German company that specializes in agricultural services. It operates in three main sectors: agriculture, renewable energies, and machinery. In agriculture, they offer services like soil cultivation, sowing, plant protection, and harvesting. Their renewable energies division manages biogas plants and wind turbines. In the machinery sector, they sell, rent, and repair various agricultural machines. |
||||||
| Ransomware | cjs-buerodienstleistungen.de id18825 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | beaudry.ca id18824 View details | Canada | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | bohrerhof.de id18823 View details | Germany | Agriculture / Food | pending | ||
|
[AI generated] "Bohrerhof.de" is a German-based company mainly dealing with agriculture and farming. The company primarily specializes in through farming, fish farming, and renewable energies, contributing significantly to sustainable agriculture. They offer various products from their farming including, fruits, vegetables, and produce from their bakery and butchery. They also facilitate visits and tours to their farm for a firsthand exploration experience. |
||||||
| Ransomware | metalogicinspection.com id18822 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Metalogic Inspection Services is a company noted for its groundbreaking solutions in non-destructive testing (NDT). The firm focuses on using innovative technology and methods of inspection to enhance sustainability and efficacy. Its services range to various sectors from oil and gas to power generation, providing assistance in identifying equipment defects and ensuring safety and efficiency. |
||||||
| Ransomware | comfort.de id18821 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | vcvitanzasons.com id18820 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | tramann.de id18819 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | schuhbode.de id18818 View details | Germany | Communication / Marketing | pending | ||
|
[AI generated] "Schuhbode.de" is a Germany-based online retail store that specializes in selling a wide variety of footwear for men, women, and children. Offering products from well-known brands, their collection ranges from trendy sneakers, boots, high heels to comfortable sandals and slippers. They emphasize providing high-quality shoes at competitive prices along with good customer service. |
||||||
| Ransomware | norson.com id18817 View details | Mexico | Construction / Real Estate | pending | ||
|
[AI generated] NorSon Inc. is a custom integrated construction service firm specializing in high-end residential and commercial projects. This Minnesota-based company is dedicated to providing their clients with excellent craftsmanship and personal service. They offer services in architecture, construction, designing, maintenance for luxury homes and commercial structures. NorSon's use of cutting-edge technology and attention to detail sets them apart in the industry. |
||||||
| Ransomware | fd-friedrich.com id18816 View details | Germany | Other | pending | ||
|
[AI generated] "N/A" |
||||||
| Ransomware | westwarwickwelding.com id18815 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | prestigeer.com id18814 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Prestige ER is a medical care organization located in Plano, Texas. Open 24/7, this emergency room provides immediate treatment for life-threatening conditions like heart attacks and strokes, as well as less severe issues like minor fractures and cuts. Their team of professionals includes board-certified physicians and experienced staff that utilize advanced facilities for quick diagnosis and treatments. This ER is independent from any hospital system and offers little to no wait time. |
||||||
| Ransomware | ecconstructors.com id18813 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] EC Constructors is a construction company involved in public works projects in Southern California. They specialize in water and wastewater treatment facilities, pump stations, bridges, and structural concrete. The company has completed thousands of projects, boasting versatility and a team oriented approach. They stress the importance of safety and quality in all they do. |
||||||
| Ransomware | wrm.org id18812 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | retycol.com id18811 View details | Colombia | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | marcom-inc.ca id18810 View details | Canada | Communication / Marketing | pending | ||
|
[AI generated] Marcom Inc. is a Canadian company providing businesses with safety training solutions. Their primary offerings include digital, online, and DVD training in multiple languages, compliance tracking and reporting, as well as customizable content. Their programs are aimed at various sectors including construction, transportation, and manufacturing. |
||||||
| Ransomware | adolphelawgroup.com id18809 View details | United States | Finance / Legal / Insurance | pending | ||
|
[AI generated] N/A |
||||||