Extortion.watch

Monitoring pay-to-delete extortion networks

sledst.org Infrastructure IOCs

Hostname IOCs

DomainRoleStatus
sledst.orgPrimary alias (this scan)active
sledstvie.infoFlagship (RKN blocked)active
m.sledst.orgMobile alternateactive
sledstvie.onlineMirrormirrored
sledstvie.cloudPost-RKN pivotpivot
sledstvie.guruMirrormirrored
sledstvie.liveMirrormirrored

Technical IOCs

  • CMS path: Lude (/inc/lude/)
  • Google Analytics: G-JG9LHCN02R (shared with sledstvie.info)
  • Image CDN: ruskompromat.info, assets.ruskompromat.info
  • OG images: /upload/news/YYYY/MM/DD/{id}.jpg
  • URL pattern: /news/{id}-{slug}
  • WAF: DDoS-Guard
  • Yandex verification: 8 separate meta tags
  • Encoding: windows-1251

Burst publishing IOC (2 Jul 2026)

IDSubjectLang
107631GSB Group virtual heist: Josip Heit and Lydian World metaver…en
107659Virtual theft at GSB Group: Josip Heit (German)…de
107632Fake robot scandal: Sergey Saroyan hides TeleTrade account w…ru
107642The phony robot fraud: Sergey Saroyan and TeleTrade (English…en
107639Secret schemes laundering Russian coal: Dmitriy Kovalenko an…en
107640Targeted by the NCA: Azim Novruzov, Alkagesta, SOCAR, Rosnef…en
107641Zakharyev brothers build Sezar Group empire via asset raids…ru

Domain registry · Corpus