Target Dossier
Suspect Codename:
PHANTOM-KRYPT
De-cloaked:Pavel K. (@px-ops)
94.8%CONFIDENCE
Classification
Critical Infrastructure Ransomware Broker
Attribution State
DE-CLOAKED
Physical Location:Bucharest, Romania (RO)
Attributed Timezone:UTC+3 (EEST)
Target ASN / ISP:AS3223 - Voxility S.R.L. Autonomous System
Correlated Threat Handles:
@Phantom_Krypt@px-ops@phantom_dev@krypt_operator
Clearnet Identity Anchors:
INTELLIGENCE VIEW:
Rendering Cytoscape Force-Directed Graph...
Tor Onion Circuit TopologyACTIVE CIRCUIT
Latency: 24ms
•Circuit ID: #7A3F
•Hops: 3 Nodes
Source Node
[COLLECTOR]
NTRO Defense SOCKS5 (127.0.0.1:9050)
Privoxy Scrubbed
Guard RelayHOP 1
[Frankfurt Entry]
185.220.101.4 (AS3320 DE)
TLS 1.3 Strict Encrypted
Exit RelayHOP 2
[Amsterdam Exit]
195.154.122.91 (AS1103 NL)
Exit Enclave Scrubbed
Hidden ServiceTARGET
[TARGET .onion]
dread4u5j...onion (Ransom Site)
Encrypted E2E Rendezvous
AI Stylometry & Authorship Radar
Similarity:96.2%
Rendering Radar Engine...
Darknet Posts
Clearnet Writings
Overall Attribution Similarity: 96.2% (P < 0.001)
Evidence Locker
Tracked Address:
Asset & Amount:45.0 BTC (~$2.79M USD)
Co-Spend Cluster:Confidence: 70%
3-Hop Transaction Chain:
HOP 1
45 BTCRansom Receipt
Victim Wallet bc1q84...
HOP 2
-0.05% FeeMixer / CoinJoin
Wasabi 3K98fvGz... (Obfuscated)
HOP 3
Off-rampExchange Deposit (KYC)
Binance Cluster Flagged