// THREAT ACTOR
SAFEPAY_
ActiveSAFEPAY is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of SAFEPAY — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
551
Victims tracked
1 / 13
Active mirrors
2024-11-20
First listing
2026-08-04
Most recent
Victims by year
- 2026 125
- 2025 380
- 2024 46
Leak site mirrors
13 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onionsnapshot · 2024-11-16 07:32 -
nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onionSAFEPAY snapshot · 2025-06-17 12:22 -
qkzxzeabulbbaevqkoy2ew4nukakbi4etnnkcyo3avhwu7ih7cql4gyd.onionsnapshot · 2025-06-21 20:12 -
iieavvi4wtiuijas3zw4w54a5n2srnccm2fcb3jcrvbb7ap5tfphw6ad.onionsnapshot · 2025-06-21 20:21 -
fcde4o7iquaspdbo5yetwqn3rfueet2zfy3wjosrc5dznyccwbiz6oyd.onionWelcome to nginx! snapshot · 2025-03-04 09:02 -
crmbcdcdwoex6dzajbicgzrsuw2t76pomajwdpi2mb2babbfdgcc6xid.onion404 - Not Found snapshot · 2025-09-11 20:14 -
j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onionSAFEPAY snapshot · 2025-09-13 08:18 -
wmgres25e43uwgebctgofo2qe23kf5vqevixiulubpovdglyizfugryd.onionAccess denied snapshot · 2025-10-29 05:04 -
dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onionsnapshot · 2025-08-08 07:57 -
oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onionsnapshot · 2025-08-08 07:57 -
safepay.tonsnapshot · 2025-08-08 07:58 -
safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onionSafepay Blog snapshot · 2026-08-06 21:11 -
duslj3vgel72rilqlvvlo2qw6jybmvbcdmcm4n63kyivveeif6u2xrad.onion404 — Not Found snapshot · 2026-07-29 12:39
Recent victims
The 50 most recent victims claimed by SAFEPAY. Total in the index: 551.
| Date listed | Victim | Description |
|---|---|---|
| 2026-08-04 | azn.co.jp | Founded in 1991, the company specializes in comprehensive asset manage… |
| 2026-08-04 | southshorerecycling.com | The company specializes in metal recycling, concrete and asphalt recyc… |
| 2026-08-04 | cpu-ag.com | Founded in 1981 and headquartered in Friedberg, Bavaria, the company h… |
| 2026-08-04 | multiaqua.com | Founded in 1999, the company specializes in the design, engineering, a… |
| 2026-08-04 | pradotuylaw.com | The firm focuses on practice areas including personal injury, wrongful… |
| 2026-08-04 | naskdoorinc.com | Headquartered in West Chester, Pennsylvania, the company has served cu… |
| 2026-08-04 | new-point.it | Headquartered in Signa, Florence, Italy, the company was founded in 20… |
| 2026-08-04 | simonrack.com | Headquartered in Alfamén, Zaragoza, Spain, the company has been manufa… |
| 2026-08-04 | hanan-hov.co.il | Headquartered in Neve Yamin, Israel, the company provides comprehensiv… |
| 2026-07-27 | haugbuersten.de | Although the company in its current industrial form was founded in 196… |
| 2026-07-27 | landesmuseum.de | Established in 1919, the museum preserves and presents more than 50,00… |
| 2026-07-27 | hst.eu | Headquartered in Kressbronn am Bodensee, Germany, the company traces i… |
| 2026-07-27 | braywoodschool.co.uk | Founded in 1858, the school has more than 165 years of educational his… |
| 2026-07-27 | weier.org | The company specializes in representing manufacturers of plumbing, hea… |
| 2026-07-27 | bnpdist.com | Headquartered in New York City, the company has been operating since 1… |
| 2026-07-27 | zinorm.de | Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, t… |
| 2026-07-27 | moebelmayer.de | Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, t… |
| 2026-07-27 | paritaet-nrw.org | Headquartered in Wuppertal, the organization represents approximately … |
| 2026-07-24 | upland.k12.ca.us | The district provides comprehensive education from kindergarten throug… |
| 2026-07-24 | gvsurgicalarts.com | Founded in 2004 by Dr. Brian R. Chisdak, the practice has grown into o… |
| 2026-07-20 | wdk.de | Founded in 1950 and headquartered in Frankfurt am Main, the organizati… |
| 2026-07-20 | jaecklin-industrial.de | Founded in 1935 by Julius Jäcklin, the company has developed from a re… |
| 2026-07-20 | lbb-treuhand.de | The company specializes in tax consulting, auditing, accounting, payro… |
| 2026-07-20 | timetex.de | The company traces its origins to 1991, when the TimeTEX brand was acq… |
| 2026-07-20 | stroebel-gruppe.de | Headquartered in Langenzenn, Bavaria, the company was founded in 1978 … |
| 2026-07-20 | industriesjaro.com | Over several decades, Jaro has evolved from manufacturing telephone bo… |
| 2026-07-20 | cenesco.de | Founded in 1998, the company provides comprehensive information techno… |
| 2026-07-20 | acsmallmaxwell.com.au | Founded in 1916 by Ambrose Cecil Small, the firm has provided professi… |
| 2026-07-20 | mende-grundbesitz.de | Founded in 1994, the company specializes in the professional administr… |
| 2026-07-13 | shuttlemeadowcc.com | Founded in 1917, the club is one of the oldest and most prestigious pr… |
| 2026-07-06 | hahn-airport.de | Originally developed as a United States military air base, the facilit… |
| 2026-07-06 | matrixwebagency.com | The company specializes in providing integrated digital solutions that… |
| 2026-07-06 | bmiprojects.de | Originally operating under the name Bez Marine Interiors GmbH, the com… |
| 2026-07-06 | caritas-koblenz.de | Headquartered in Koblenz, the association was founded in 1918 and has … |
| 2026-07-06 | knobel-bau.de | Founded in 1947, the company has grown from a small sand and gravel bu… |
| 2026-07-06 | rtngmbh.de | Founded in 2015, the company specializes in the construction, installa… |
| 2026-07-06 | stedwardscatholicfirstschool.co.uk | The school provides education for children aged 5 to 9 years and opera… |
| 2026-07-06 | lh-wohnverbund-wohnen-nrw.de | They specialize in providing residential care, supported living, and s… |
| 2026-07-06 | shw-fr.de | The company traces its origins to 1596, making it one of Germany's old… |
| 2026-07-02 | awo-suedost.de | Established in 1994, it is one of the regional branches of the Arbeite… |
| 2026-07-02 | dia179.com | Founded in 2007, the firm specializes in industrial architecture, logi… |
| 2026-07-02 | eaglecrestlife.org | Operating under Bethany Lutheran Homes, Inc., the organization has ser… |
| 2026-06-27 | hellmold-plank.de | Founded in 1904 by Heinrich Hellmold and Heinrich Plank, the company h… |
| 2026-06-22 | ehg.bayern | Founded in 1991, the company has evolved from a regional waste managem… |
| 2026-06-17 | seinordovest.it | Headquartered in the Piedmont region, the company operates as a public… |
| 2026-06-17 | harcourts.net | Founded in 1888 in Wellington, New Zealand, the company has grown from… |
| 2026-06-17 | zaunsysteme.de | Operating within Germany’s construction materials and perimeter securi… |
| 2026-06-17 | brscappuccio.it | Headquartered in Casandrino, near Naples in the Campania region, the c… |
| 2026-06-17 | gut-heckenhof.de | Established in 1992, the company operates a four-star hotel and one of… |
| 2026-06-15 | hughstirling.co.uk | Headquartered in Goslar, Lower Saxony, the firm has been operating sin… |