Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-11-12 23:37Payment SiteCerber
vyohacxzoue32vvk.fp6fj6.top
Eranet International Limited (n/a)
2016-11-12 21:22Payment SiteCerber
vyohacxzoue32vvk.c4cwr4.bid
Eranet International Limited (n/a)
2016-11-12 21:14Payment SiteCerber
ahuqfrqk54v3vnzj.9sfk22.bid
Eranet International Limited (n/a)
2016-11-12 20:55Payment SiteCerber
vyohacxzoue32vvk.h2xun1.top
Eranet International Limited (n/a)
2016-11-12 19:07Payment SiteCerber
ffoqr3ug7m726zou.ptnbfm.top
Eranet International Limited (n/a)
2016-11-12 14:26Payment SiteCerber
ffoqr3ug7m726zou.2fu7bc.top
Eranet International Limited (n/a)
2016-11-12 14:23Payment SiteCerber
ffoqr3ug7m726zou.x8p2m7.bid
Eranet International Limited (n/a)
2016-11-12 12:20Payment SiteCerber
vyohacxzoue32vvk.w67y8u.bid
Eranet International Limited (n/a)
2016-11-12 10:11Payment SiteCerber
ffoqr3ug7m726zou.w67y8u.bid
Eranet International Limited (n/a)
2016-11-12 09:43Payment SiteCerber
vyohacxzoue32vvk.zu3fzc.bid
Eranet International Limited (n/a)
2016-11-12 07:30Payment SiteCerber
ahuqfrqk54v3vnzj.c8jxpp.top
Eranet International Limited (n/a)
2016-11-12 03:54Payment SiteCerber
vyohacxzoue32vvk.chnbyl.bid
Eranet International Limited (n/a)
2016-11-12 03:03Payment SiteCerber
ffoqr3ug7m726zou.4tkb0d.top
Eranet International Limited (n/a)
2016-11-11 23:07Payment SiteCerber
ffoqr3ug7m726zou.hpwom3.top
Eranet International Limited (n/a)
2016-11-11 20:06Payment SiteCerber
lfdachijzuwx4bc4.iuzppd.top
Eranet International Limited (n/a)
2016-11-11 19:02Payment SiteCerber
vyohacxzoue32vvk.7m7ujm.bid
Eranet International Limited (n/a)
2016-11-11 18:01Payment SiteCerber
ffoqr3ug7m726zou.ffsm1a.bid
Eranet International Limited (n/a)
2016-11-11 16:10Distribution SiteLocky
holmebjerg.dk
46.30.215.60 (- Denmark)
2016-11-11 16:10Distribution SiteLocky
healwithbill.com
GODADDY.COM, LLC198.54.114.249 (- United States)
2016-11-11 16:10Distribution SiteLocky
itemweb.fr
1&1 Internet SE217.160.9.174 (- Germany)
2016-11-11 16:10Distribution SiteLocky
gossipsjunction.com
NAME.COM, INC.122.10.117.200 (- Hong Kong)
2016-11-11 16:10Distribution SiteLocky
jlhack.com
BEIJING INNOVATIVE LINKAGE TECHN[...]123.184.18.142 (- China)
2016-11-11 16:10Distribution SiteLocky
furniturefactory.lk
67.231.243.47 (- United States)
2016-11-11 16:10Distribution SiteLocky
g2el.com
GODADDY.COM, LLC (n/a)
2016-11-11 16:10Distribution SiteLocky
godgetaways.com
GODADDY.COM, LLC198.54.116.94 (- United States)
2016-11-11 16:10Distribution SiteLocky
sport-grace.by
Open Contact, Ltd86.57.246.177 (- Belarus)
2016-11-11 16:10Distribution SiteLocky
scupwail.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-11 16:09Distribution SiteLocky
scupwail.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-11 16:09Distribution SiteLocky
scupwail.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-11 16:09Distribution SiteLocky
oatloyd.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-11 16:09Distribution SiteLocky
just-say-yes.nl
AXC158.69.64.5 (- United States)
2016-11-11 16:09Distribution SiteLocky
thirlnak.net
KEY-SYSTEMS GMBH (n/a)
2016-11-11 16:09Distribution SiteLocky
kyotoeyewear.com
NETWORK SOLUTIONS, LLC.216.110.144.243 (- United States)
2016-11-11 16:09Distribution SiteLocky
putidwipe.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-11 16:09Distribution SiteLocky
mospi.ru
REGTIME-RU91.221.37.14 (- Russian Federation)
2016-11-11 16:09Distribution SiteLocky
magical-connection.com
TUCOWS DOMAINS INC.216.97.235.30 (- United States)
2016-11-11 16:09Distribution SiteLocky
motefugue.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-11 16:09Distribution SiteLocky
oatloyd.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-11 16:09Distribution SiteLocky
putidwipe.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-11 16:08Distribution SiteLocky
modernimpex.ro
ICI - ROTLD188.214.210.136 (- Romania)
2016-11-11 16:08Distribution SiteLocky
canidtrove.net
KEY-SYSTEMS GMBH (n/a)
2016-11-11 16:08Distribution SiteLocky
batutatravel.com
1&1 INTERNET SE74.208.223.237 (- United States)
2016-11-11 16:08Distribution SiteLocky
termoskan.ru
RU-CENTER-RU (n/a)
2016-11-11 16:08Distribution SiteLocky
karayurt.nl
Hostnet bv84.106.214.13 (- Netherlands)
2016-11-11 16:08Distribution SiteLocky
injectorholder.com
1&1 INTERNET SE69.195.124.69 (- United States)
2016-11-11 16:08Distribution SiteLocky
thirlnak.net
KEY-SYSTEMS GMBH (n/a)
2016-11-11 16:08Distribution SiteLocky
happyhands.ru
RU-CENTER-RU5.178.87.50 (- Russian Federation)
2016-11-11 16:08Distribution SiteLocky
goldensad.ru
REGRU-RU (n/a)
2016-11-11 16:08Distribution SiteLocky
xmdqcy.com
BEIJING INNOVATIVE LINKAGE TECHN[...]122.114.130.243 (- China)
2016-11-11 16:07Distribution SiteLocky
lubrinor.pt
94.126.169.40 (- Portugal)
2016-11-11 16:07Distribution SiteLocky
mundiversial.com
DOMAIN.COM, LLC86.109.162.160 (- Spain)
2016-11-11 16:07Distribution SiteLocky
machamerfinancial.com
WILD WEST DOMAINS, LLC184.168.221.29 (- United States)
2016-11-11 16:07Distribution SiteLocky
pillorydowncommercials.co.uk
123-Reg Limited t/a 123-reg159.100.183.130 (- United States)
2016-11-11 16:07Distribution SiteLocky
happymedia.vn
103.7.40.186 (- Vietnam)
2016-11-11 16:07Distribution SiteLocky
eribusiness.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]143.95.252.191 (- United States)
2016-11-11 16:07Distribution SiteLocky
iomf.ch
195.160.191.14 (- Switzerland)
2016-11-11 16:07Distribution SiteLocky
manshutang.com
BIZCN.COM, INC.45.248.71.11 (- Hong Kong)
2016-11-11 16:07Distribution SiteLocky
mangup.net
DOMAIN.COM, LLC107.165.208.242 (- United States)
2016-11-11 16:07Distribution SiteLocky
oatloyd.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-11 16:07Distribution SiteLocky
jndszs.com
XIN NET TECHNOLOGY CORPORATION123.57.80.180 (- China)
2016-11-11 16:06Distribution SiteLocky
milianjie.com
ENAME TECHNOLOGY CO., LTD.120.25.68.240 (- China)
2016-11-11 16:06Distribution SiteLocky
klubfiatstilo.pl
Domeny.pl sp. z o.o.79.137.77.255 (- Italy)
2016-11-11 16:06Distribution SiteLocky
juzilove.com
CHENGDU WEST DIMENSION DIGITAL T[...]120.25.161.125 (- China)
2016-11-11 16:06Distribution SiteLocky
minglian.ca
Tucows.com Co.160.153.59.199 (- United States)
2016-11-11 16:06Distribution SiteLocky
motefugue.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-11 16:05Distribution SiteLocky
hayber.com
ONLINENIC, INC.162.216.114.44 (- United States)
2016-11-11 16:05Distribution SiteLocky
dzwiekowe.com
KEY-SYSTEMS GMBH (n/a)
2016-11-11 16:05Distribution SiteLocky
ijordantours.com
ENOM, INC.143.95.75.246 (- United States)
2016-11-11 16:05Distribution SiteLocky
putidwipe.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-11 16:05Distribution SiteLocky
frumiel.cl
200.29.152.141 (- Chile)
2016-11-11 16:05Distribution SiteLocky
motefugue.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-11 16:05Distribution SiteLocky
mhxlongbinh.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]112.78.1.166 (- Vietnam)
2016-11-11 16:05Distribution SiteLocky
koenphoto.com
BRANDON GRAY INTERNET SERVICES, [...] (n/a)
2016-11-11 16:04Distribution SiteLocky
ilmdesign.com
FASTDOMAIN, INC. (n/a)
2016-11-11 16:04Distribution SiteLocky
jyxiangqin.com
CHENGDU WEST DIMENSION DIGITAL T[...] (n/a)
2016-11-11 16:04Distribution SiteLocky
knowtica.com
NETWORK SOLUTIONS, LLC.149.115.17.29 (- United States)
2016-11-11 16:04Distribution SiteLocky
iancurry.org
eNom, Inc. (n/a)
2016-11-11 16:04Distribution SiteLocky
nsrcconsulting.com
ENOM, INC.113.197.39.189 (- Singapore)
2016-11-11 16:04Distribution SiteLocky
scupwail.com
IP MIRROR PTE LTD. DBA IP MIRROR (n/a)
2016-11-11 16:04Distribution SiteLocky
landondavid.com
FASTDOMAIN, INC. (n/a)
2016-11-11 16:04Distribution SiteLocky
nakedglobal.com
XIN NET TECHNOLOGY CORPORATION (n/a)
2016-11-11 16:04Distribution SiteLocky
www.meleather.com
GODADDY.COM, LLC216.130.168.167 (- United States)
2016-11-11 16:03Distribution SiteLocky
jsydjc.com
WEB COMMERCE COMMUNICATIONS LIMI[...]221.122.111.73 (- China)
2016-11-11 16:03Distribution SiteLocky
asrcargo.ru
R01-RU95.213.196.126 (- Russian Federation)
2016-11-11 16:03Distribution SiteLocky
thirlnak.net
KEY-SYSTEMS GMBH (n/a)
2016-11-11 16:03Distribution SiteLocky
lorienglobal.com
GODADDY.COM, LLC (n/a)
2016-11-11 16:03Distribution SiteLocky
nsrcconsulting.com
ENOM, INC.113.197.39.189 (- Singapore)
2016-11-11 16:03Distribution SiteLocky
globalem.asia
PDR Ltd. d/b/a PublicDomainRegis[...]103.23.76.112 (- Singapore)
2016-11-11 16:03Distribution SiteLocky
labnat.fr
OVH213.186.33.2 (- France)
2016-11-11 16:03Distribution SiteLocky
oatloyd.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-11 16:03Distribution SiteLocky
www.gorilla-trails.com
ENOM, INC.129.121.2.217 (- United States)
2016-11-11 16:03Distribution SiteLocky
jculley.com
ENOM, INC.192.40.112.211 (- United States)
2016-11-11 16:02Distribution SiteLocky
mujtabatrading.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]198.49.66.105 (- United States)
2016-11-11 16:02Distribution SiteLocky
gourmetlimes.com
SYNERGY WHOLESALE PTY LTD103.9.171.125 (- Australia)
2016-11-11 16:02Distribution SiteLocky
hogsmeade.ru
REGRU-RU5.101.112.171 (- Estonia)
2016-11-11 16:02Distribution SiteLocky
googleadwords.pro
(n/a)
2016-11-11 16:02Distribution SiteLocky
motefugue.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-11-11 16:02Distribution SiteLocky
musicfrombali.com
MELBOURNE IT, LTD. D/B/A INTERNE[...]103.255.237.113 (- Vietnam)
2016-11-11 16:02Distribution SiteLocky
mobilefashion.sg
CYBERSITE SERVICES PTE LTD111.235.136.170 (- Singapore)
2016-11-11 16:02Distribution SiteLocky
herstedhus.dk
94.231.103.25 (- Denmark)

# of rows displayed: 100
# of entries in database: 12'828

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >