Skip to main content
Ransomware Group

Crpxo

CRPxO is actively recruiting affiliates, offering: 🔹 70% revenue share 🔹 XMR/BTC payouts 🔹 Claimed payouts within 24 hours 🔹 $333 one-time affiliate access

Known victims37

Threat level

MEDIUM

Get an alert if one of your domains is named on a ransomware leak site.

Monitor your domainsFree account · up to 5 monitored targets

Indicators of Compromise (IOCs)

IP addresses

11
  • 23.224.4.114
  • 104.18.21.226
  • 151.101.128.223
  • 146.75.116.175
  • 104.18.20.226
  • 48.192.1.65
  • 151.101.0.223
  • 140.248.136.175
  • 146.75.120.175
  • 146.75.122.133
  • 151.101.192.223

Domains

3
  • option.spark198.com
  • crpx0.su
  • crpxoxo.pw

Get the complete IOC feed

The full IOC database by API, ready for your SIEM or SOAR.

Create free account

No credit card required · Free API key

Known infrastructure

The following Tor hidden services have been associated with this group:

  • Работа сайта приостановлена
  • crpx0.su
  • CRPX0 C2 Login
  • CRPxO – Data Leak Blog - We publish what they hide
  • kqi5yty6ipuhwz4anutty6hob6et7dvnnxg6kcnulwedjaz5oton2zyd.onion

These sites are malicious. Open them only from an isolated environment.

0

Check if you’re affected

Look up your domain to see whether it appears on Crpxo’s victim list.

Try it nowFree⌘K
Try

risk score · threat categories · sources · age · confidence — in one request

Other active ransomware groups

LockBitALPHV BlackcatCL0PPlayBianLianAkiraMedusaRhysida