Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-07-15 14:10Distribution SiteLocky
dtrealty.us
GODADDY.COM, INC. (n/a)
2016-07-15 14:10Distribution SiteLocky
lilabners.com
NETWORK SOLUTIONS, LLC.52.71.185.125 (- United States) +1 A record(s) 54.172.131.220 (AS14618, - United States)
2016-07-15 14:10Distribution SiteLocky
jorgeloli.com
GODADDY.COM, LLC (n/a)
2016-07-15 14:10Distribution SiteLocky
shaman-studio.com
ONLINENIC, INC. (n/a)
2016-07-15 13:23Payment SiteCerber
pmenboeqhyrpvomq.9ildst.top
Eranet International Limited (n/a)
2016-07-15 10:59Payment SiteCerber
pmenboeqhyrpvomq.7s0g3v.top
Eranet International Limited (n/a)
2016-07-15 10:48Payment SiteCerber
pmenboeqhyrpvomq.paypoints.red
Alpnames Limited (n/a)
2016-07-15 10:13Distribution SiteLocky
zckupila.republika.pl
Domeny.pl sp. z o.o.213.180.150.17 (- Poland)
2016-07-15 10:13Distribution SiteLocky
alexiedb.home.ro
ICI - ROTLD81.196.20.133 (- Romania)
2016-07-15 10:12Distribution SiteLocky
callatisinstitut.fr
OVH213.186.33.4 (- France)
2016-07-15 10:12Distribution SiteLocky
strstudio.pl
OVH SAS87.98.239.19 (- Poland)
2016-07-15 10:12Distribution SiteLocky
www.rgtalp14.it
TISCALIDOMAIN-REG213.205.40.169 (- Italy)
2016-07-15 10:12Distribution SiteLocky
www.guapaweb.jazztel.es
62.14.3.195 (- Spain)
2016-07-15 10:12Distribution SiteLocky
83.235.64.44
n/a
2016-07-15 10:12Distribution SiteLocky
178.78.87.8
n/a
2016-07-15 10:12Distribution SiteLocky
www.vedasrestaurant.com
GODADDY.COM, LLC192.186.251.225 (- United States)
2016-07-15 10:12Distribution SiteLocky
tabskillersmachine.com
TUCOWS DOMAINS INC.185.81.0.109 (- Italy)
2016-07-15 10:12Distribution SiteLocky
edelweiss-secretariat.com
OVH213.186.33.19 (- France)
2016-07-15 10:12Distribution SiteLocky
sabplatform.com
GODADDY.COM, LLC107.180.25.1 (- United States)
2016-07-15 10:12Distribution SiteLocky
aberfoyledental.ca
Tucows.com Co.66.147.244.171 (- United States)
2016-07-15 10:12Distribution SiteLocky
sturminvestigations.com
GODADDY.COM, LLC108.179.243.49 (- United States)
2016-07-15 10:12Distribution SiteLocky
exclusive-closet.com
GODADDY.COM, LLC192.186.250.7 (- United States)
2016-07-15 10:12Distribution SiteLocky
ilbalconcino2011.it
WIDE-REG (n/a)
2016-07-15 10:12Distribution SiteLocky
flaglerpower.com
GODADDY.COM, LLC (n/a)
2016-07-15 10:12Distribution SiteLocky
www.digi9.in
GoDaddy.com, LLC (R101-AFIN)23.229.246.136 (- United States)
2016-07-15 10:12Distribution SiteLocky
lerens.com
WILD WEST DOMAINS, LLC80.172.253.133 (- Portugal)
2016-07-15 10:12Distribution SiteLocky
bbvogliadimare.it
WIDE-REG217.73.226.220 (- Italy)
2016-07-15 10:11Distribution SiteLocky
uitindrachten.nl
Mihosnet109.237.208.32 (- Netherlands)
2016-07-15 10:11Distribution SiteLocky
300tomoli.it
WIDE-REG217.73.226.220 (- Italy)
2016-07-15 10:11Distribution SiteLocky
blanquerna.eresmas.net
ENTORNO DIGITAL, S.A.62.37.237.59 (- Spain)
2016-07-15 10:11Distribution SiteLocky
adsnight.com
GODADDY.COM, LLC166.62.10.52 (- United States)
2016-07-15 10:11Distribution SiteLocky
newgeneration2010.it
WIDE-REG217.73.226.220 (- Italy)
2016-07-15 10:11Distribution SiteLocky
sichenia.omniadvert.it
ARUBA-REG95.110.242.65 (- Italy)
2016-07-15 10:11Distribution SiteLocky
nuovo.shaolinsoccer.it
WIDE-REG217.73.227.40 (- Italy)
2016-07-15 10:11Distribution SiteLocky
rough-orange.com
ENOM, INC.75.101.153.202 (- United States)
2016-07-15 10:11Distribution SiteLocky
idd00dnu.eresmas.net
ENTORNO DIGITAL, S.A.62.37.237.59 (- Spain)
2016-07-15 10:11Distribution SiteLocky
shintyaku.ame-zaiku.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]112.140.42.29 (- Japan)
2016-07-15 10:11Distribution SiteLocky
mvco.de
134.119.45.94 (- Germany)
2016-07-15 10:11Distribution SiteLocky
sfabinc.com
WILD WEST DOMAINS, LLC23.236.62.147 (- United States)
2016-07-15 10:11Distribution SiteLocky
www.italius.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]213.205.40.169 (- Italy)
2016-07-15 10:11Distribution SiteLocky
ebnmp.com
NETWORK SOLUTIONS, LLC.69.49.101.51 (- Canada)
2016-07-15 10:11Distribution SiteLocky
seroca.com
TECNOCRATICA CENTRO DE DATOS, S.[...]46.226.47.21 (- Spain)
2016-07-15 10:00Payment SiteCerber
52uo5k3t73ypjije.3rr6ao.top
Eranet International Limited (n/a)
2016-07-15 08:51Payment SiteCerber
52uo5k3t73ypjije.i5cgcw.top
Eranet International Limited (n/a)
2016-07-15 07:33Payment SiteCerber
52uo5k3t73ypjije.sg62es.top
Eranet International Limited (n/a)
2016-07-15 03:38Payment SiteCerber
52uo5k3t73ypjije.5kb3dl.top
Eranet International Limited (n/a)
2016-07-15 02:01Payment SiteCerber
52uo5k3t73ypjije.p2lsgr.top
Eranet International Limited (n/a)
2016-07-14 23:28Payment SiteCerber
52uo5k3t73ypjije.kcufx4.top
Eranet International Limited (n/a)
2016-07-14 21:41Payment SiteCerber
52uo5k3t73ypjije.7jiff7.top
Eranet International Limited (n/a)
2016-07-14 19:44Payment SiteCerber
52uo5k3t73ypjije.j92msu.top
Eranet International Limited (n/a)
2016-07-14 19:35Payment SiteCerber
52uo5k3t73ypjije.ka0te8.top
Eranet International Limited (n/a)
2016-07-14 19:31Payment SiteCerber
pmenboeqhyrpvomq.x1kofw.top
Eranet International Limited (n/a)
2016-07-14 18:25Payment SiteCerber
52uo5k3t73ypjije.ujtwhg.top
Eranet International Limited (n/a)
2016-07-14 16:07Payment SiteCerber
pmenboeqhyrpvomq.b7mciu.top
Eranet International Limited (n/a)
2016-07-14 14:01Payment SiteCerber
4kqd3hmqgptupi3p.9ildst.top
Eranet International Limited (n/a)
2016-07-14 12:24Payment SiteLocky
mphtadhci5mrdlju.tor2web.org
Tucows Inc.185.100.85.150 (- Romania) +1 A record(s) 192.36.27.5 (AS60729, - Sweden)
2016-07-14 12:10Payment SiteCerber
4kqd3hmqgptupi3p.chargecar.vip
Alpnames (n/a)
2016-07-14 09:58Payment SiteCerber
27lelchgcvs2wpm7.vrid8l.top
Eranet International Limited (n/a)
2016-07-14 09:51Payment SiteCerber
52uo5k3t73ypjije.9ildst.top
Eranet International Limited (n/a)
2016-07-14 09:26Distribution SiteLocky
giuko.com
TUCOWS DOMAINS INC.85.235.130.49 (- Italy)
2016-07-14 09:26Distribution SiteLocky
www.mystyleparrucchieri.com
TUCOWS DOMAINS INC.80.88.87.96 (- Italy)
2016-07-14 09:26Distribution SiteLocky
sandrosgrill.com
NOMINALIA INTERNET S.L. (n/a)
2016-07-14 09:26Distribution SiteLocky
www.comervillamil.com
ARSYS INTERNET, S.L. D/B/A NICLI[...]127.0.0.1 (n/a)
2016-07-14 09:26Distribution SiteLocky
univerzing.com
ONLINENIC, INC.37.230.105.3 (- Turkey)
2016-07-14 09:26Distribution SiteLocky
tecnoaspirazioni.com
REGISTER.IT SPA195.110.124.133 (- Italy)
2016-07-14 09:26Distribution SiteLocky
www.mariefrancepochna.com
REGISTER.IT SPA81.88.48.95 (- Italy)
2016-07-14 09:26Distribution SiteLocky
kenestyonline.com
GODADDY.COM, LLC192.186.247.66 (- United States)
2016-07-14 09:26Distribution SiteLocky
marcrabassa.com
NOMINALIA INTERNET S.L.81.88.48.71 (- Italy)
2016-07-14 09:26Distribution SiteLocky
isknife.com
GABIA, INC. (n/a)
2016-07-14 09:25Distribution SiteLocky
ibsactividades.com
1&1 INTERNET SE51.254.127.111 (- France)
2016-07-14 09:25Distribution SiteLocky
myphychoice.com
DOMAINPEOPLE, INC.216.110.144.157 (- United States)
2016-07-14 09:25Distribution SiteLocky
control3.com.br
192.185.209.37 (- United States)
2016-07-14 09:25Distribution SiteLocky
sollove.com.br
186.202.153.144 (- Brazil)
2016-07-14 09:25Distribution SiteLocky
hw.srca.org
GoDaddy.com, LLC192.186.224.37 (- United States)
2016-07-14 09:25Distribution SiteLocky
joslinsalesltd.com
NETWORK SOLUTIONS, LLC.23.236.62.147 (- United States)
2016-07-14 09:25Distribution SiteLocky
biovinci.com.br
108.179.193.134 (- United States)
2016-07-14 09:25Distribution SiteLocky
right-livelihoods.org
PDR Ltd. d/b/a PublicDomainRegis[...]163.44.198.41 (- Thailand)
2016-07-14 09:25Distribution SiteLocky
nmfabb.com
TUCOWS DOMAINS INC.216.55.149.9 (- United States)
2016-07-14 09:25Distribution SiteLocky
webidator.co.il
(n/a)
2016-07-14 09:24Distribution SiteLocky
jem-111.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]153.122.18.175 (- Japan)
2016-07-14 09:24Distribution SiteLocky
www.fabricemontoyo.com
REGISTER.IT SPA81.88.57.68 (- Italy)
2016-07-14 09:24Distribution SiteLocky
sophoula.com
GODADDY.COM, LLC216.187.94.181 (- United States)
2016-07-14 09:24Distribution SiteLocky
valdemarincapital.com
ARSYS INTERNET, S.L. D/B/A NICLI[...]217.76.142.108 (- Spain)
2016-07-14 09:24Distribution SiteLocky
mystyleparrucchieri.com
TUCOWS DOMAINS INC.80.88.87.96 (- Italy)
2016-07-14 09:24Distribution SiteLocky
hiramteran.com
GODADDY.COM, LLC207.174.215.153 (- United States)
2016-07-14 09:24Distribution SiteLocky
choogo.net
GABIA, INC.121.125.79.171 (- Korea)
2016-07-14 09:24Distribution SiteLocky
heonybaby.synology.me
GoDaddy.com, LLC (n/a)
2016-07-14 09:24Distribution SiteLocky
mindfocus.com.br
108.179.193.134 (- United States)
2016-07-14 09:24Distribution SiteLocky
ejdadim.com
22NET, INC.139.129.234.97 (- China)
2016-07-14 09:24Distribution SiteLocky
www.thephoneguy.talktalk.net
ASCIO TECHNOLOGIES, INC. DANMARK[...]62.24.202.31 (- United Kingdom)
2016-07-14 09:24Distribution SiteLocky
grandfm.com
GODADDY.COM, LLC104.155.128.51 (- United States)
2016-07-14 09:24Distribution SiteLocky
alanakamine.com.br
108.179.193.133 (- United States)
2016-07-14 09:24Distribution SiteLocky
heavenboundministry.com
WILD WEST DOMAINS, LLC199.83.129.223 (- United States) +1 A record(s) 199.83.131.223 (AS19551, - United States)
2016-07-14 09:23Distribution SiteLocky
lifecare-hc.com
GODADDY.COM, LLC (n/a)
2016-07-14 09:23Distribution SiteLocky
pierre-rottet.com
REGISTER.IT SPA81.88.57.68 (- Italy)
2016-07-14 09:23Distribution SiteLocky
iddaatahmin.com
ENOM, INC.162.255.119.24 (- United States)
2016-07-14 09:23Distribution SiteLocky
hrlpk.com
ONLINENIC, INC.203.124.43.229 (- Pakistan)
2016-07-14 09:23Distribution SiteLocky
intracorpwestsidecollection.com
ENOM, INC.192.199.204.103 (- Canada)
2016-07-14 09:23Distribution SiteLocky
tozdance.com
NETPIA.COM, INC.61.14.209.175 (- Korea)
2016-07-14 09:23Distribution SiteLocky
infocuscreative.net
GODADDY.COM, LLC192.249.112.224 (- United States)

# of rows displayed: 100
# of entries in database: 12'899

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 >