Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-29 09:47Distribution SiteLocky
khasitez.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:47Distribution SiteLocky
knigoboz.ru
RU-CENTER-RU89.111.176.87 (- Russian Federation)
2016-09-29 09:47Distribution SiteLocky
abbiholland.com
TUCOWS DOMAINS INC.88.208.252.202 (- United Kingdom)
2016-09-29 09:47Distribution SiteLocky
kayooo.net
TUCOWS DOMAINS INC.185.23.21.18 (- Poland)
2016-09-29 09:47Distribution SiteLocky
columbiaprintingservices.com
GODADDY.COM, LLC192.186.254.41 (- United States)
2016-09-29 09:47Distribution SiteLocky
jscompuserve.com
TLDS, LLC DBA SRSPLUS66.147.242.192 (- United States)
2016-09-29 09:47Distribution SiteLocky
tolgaustun.com
REG2C.COM, INC.209.99.40.222 (- United States)
2016-09-29 09:46Distribution SiteLocky
3ddentalimage.com
FASTDOMAIN, INC.198.1.97.113 (- United States)
2016-09-29 09:45Distribution SiteLocky
59jd.com
GO FRANCE DOMAINS, LLC170.178.178.36 (- United States)
2016-09-29 09:45Distribution SiteLocky
rglogistic.com
DELUXE SMALL BUSINESS SALES, INC[...]64.29.151.221 (- United States)
2016-09-29 09:45Distribution SiteLocky
exonbalai.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:45Distribution SiteLocky
web4-magento.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]198.20.119.12 (- Netherlands)
2016-09-29 09:45Distribution SiteLocky
joventa.sk
212.57.32.63 (- Slovakia)
2016-09-29 09:45Distribution SiteLocky
ogeedfungo.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:44Distribution SiteLocky
0793mobile.com
BIZCN.COM, INC.122.114.137.245 (- China)
2016-09-29 09:44Distribution SiteLocky
mayurinkorat.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]119.59.120.10 (- Thailand)
2016-09-29 09:44Distribution SiteLocky
touchasoul.org
GoDaddy.com, LLC72.167.232.186 (- United States)
2016-09-29 09:44Distribution SiteLocky
redegamb.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:43Distribution SiteLocky
womenepic.com
INTERNET DOMAIN SERVICE BS CORP27.254.67.98 (- Thailand)
2016-09-29 09:43Distribution SiteLocky
immewrood.net
KEY-SYSTEMS GMBH (n/a)
2016-09-29 09:43Distribution SiteLocky
domaks-dom.ru
RU-CENTER-RU37.140.192.34 (- Russian Federation)
2016-09-29 09:43Distribution SiteLocky
londonmusicclub.com
TUCOWS DOMAINS INC.70.33.246.180 (- Canada)
2016-09-29 09:43Distribution SiteLocky
pthcu.org
OnlineNIC Inc.210.1.58.190 (- Thailand)
2016-09-29 09:43Distribution SiteLocky
jetpcl.com
NETWORK SOLUTIONS, LLC.23.239.25.26 (- United States)
2016-09-29 09:42Distribution SiteLocky
szaloncukor.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]5.56.37.136 (- Hungary)
2016-09-29 09:42Distribution SiteLocky
baankonkoh.com
ONLINENIC, INC.210.1.58.38 (- Thailand)
2016-09-29 09:42Distribution SiteLocky
redegamb.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 09:42Distribution SiteLocky
hastarim.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]185.84.180.59 (- Turkey)
2016-09-29 09:42Distribution SiteLocky
91ise.info
GoDaddy.com, LLC103.229.126.235 (- Taiwan)
2016-09-29 08:18Payment SiteCerber
4kqd3hmqgptupi3p.meetbinds.pw
AlpNames Limited (n/a)
2016-09-29 07:46Payment SiteCerber
4kqd3hmqgptupi3p.valueshes.bid
Alpnames Limited (n/a)
2016-09-29 07:22Distribution SiteLocky
digital-print.ru
RU-CENTER-RU91.219.192.81 (- Russian Federation)
2016-09-29 07:22Distribution SiteLocky
camangenep.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:22Distribution SiteLocky
gold-insurance.com
DOMAIN.COM, LLC212.175.247.30 (- Turkey)
2016-09-29 07:22Distribution SiteLocky
sakegawaya.com
TUCOWS DOMAINS INC.202.191.118.131 (- Japan)
2016-09-29 07:22Distribution SiteLocky
excellenceinmentoring.com
FASTDOMAIN, INC.74.220.199.8 (- United States)
2016-09-29 07:21Distribution SiteLocky
eynmyxa.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:21Distribution SiteLocky
portal.rimpro.ru
REGTIME-RU (n/a)
2016-09-29 07:21Distribution SiteLocky
hollandinternetservices.com
ENOM, INC.85.17.170.171 (- Netherlands)
2016-09-29 07:21Distribution SiteLocky
easyfo.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]27.254.148.143 (- Thailand)
2016-09-29 07:21Distribution SiteLocky
vicwulaw.com
GODADDY.COM, LLC160.153.32.34 (- United States)
2016-09-29 07:21Distribution SiteLocky
helpcomm.com
DOMAIN.COM, LLC (n/a)
2016-09-29 07:21Distribution SiteLocky
etustime.com
ONLINENIC, INC.185.22.184.169 (- Turkey)
2016-09-29 07:21Distribution SiteLocky
etaaulos.com
KEY-SYSTEMS GMBH (n/a)
2016-09-29 07:21Distribution SiteLocky
lavalower.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:21Distribution SiteLocky
devzendo.org
eNom, Inc.212.53.86.27 (- United Kingdom)
2016-09-29 07:21Distribution SiteLocky
eynmyxa.com
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:21Distribution SiteLocky
cylooks.com
HANGANG SYSTEMS, INC. D/B/A DORE[...]221.143.46.199 (- Korea)
2016-09-29 07:21Distribution SiteLocky
aarontax.com
GODADDY.COM, LLC107.180.2.55 (- United States)
2016-09-29 07:21Distribution SiteLocky
prod23.ru
REGRU-RU194.58.120.238 (- Russian Federation)
2016-09-29 07:21Distribution SiteLocky
gelecekdiyarbakirsigorta.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]94.73.150.110 (- Turkey)
2016-09-29 07:21Distribution SiteLocky
healingwaterscc.com
GODADDY.COM, LLC69.175.70.186 (- United States)
2016-09-29 07:20Distribution SiteLocky
nikitassalon.com
ENOM, INC. (n/a)
2016-09-29 07:20Distribution SiteLocky
yoohoofishing.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]150.107.31.70 (- Thailand)
2016-09-29 07:20Distribution SiteLocky
lavalower.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:20Distribution SiteLocky
colufras.org
Namesilo, LLC104.144.125.68 (- United States)
2016-09-29 07:20Distribution SiteLocky
lordalexleon.com
1 API GMBH (n/a)
2016-09-29 07:20Distribution SiteLocky
pinkeyeevents.com
GODADDY.COM, LLC103.21.58.66 (- India)
2016-09-29 07:20Distribution SiteLocky
iloveyf.com
HICHINA ZHICHENG TECHNOLOGY LTD.59.39.177.3 (- China)
2016-09-29 07:19Distribution SiteLocky
camangenep.net
PAKNIC (PRIVATE) LIMITED (n/a)
2016-09-29 07:19Distribution SiteLocky
mail2offers.com
TUCOWS DOMAINS INC. (n/a)
2016-09-29 07:19Distribution SiteLocky
roberttrocina.com
REGISTER.COM, INC.207.204.33.199 (- United States)
2016-09-29 07:19Distribution SiteLocky
soiaree.com
TUCOWS DOMAINS INC. (n/a)
2016-09-29 07:19Distribution SiteLocky
kranakha.net
KEY-SYSTEMS GMBH (n/a)
2016-09-29 07:19Distribution SiteLocky
taitong.info
OnlineNIC, Inc.203.146.127.213 (- Thailand)
2016-09-29 07:19Distribution SiteLocky
cedarwick.com
PARAGON INTERNET GROUP LTD T/A P[...]195.238.172.15 (- United Kingdom)
2016-09-29 07:19Distribution SiteLocky
birdemetresim.com
ONLINENIC, INC.46.20.150.160 (- Turkey)
2016-09-29 07:19Distribution SiteLocky
etaaulos.com
KEY-SYSTEMS GMBH (n/a)
2016-09-29 07:19Distribution SiteLocky
forevergarmindo.com
ONLINENIC, INC.103.10.170.2 (- Indonesia)
2016-09-29 07:19Distribution SiteLocky
sunteamvn.com
P.A. VIET NAM COMPANY LIMITED123.30.133.55 (- Vietnam)
2016-09-29 07:18Distribution SiteLocky
sashatel.com
DOTNAME KOREA CORP14.0.84.162 (- Korea)
2016-09-29 07:18Distribution SiteLocky
webcyte.org
FastDomain Inc.69.89.27.246 (- United States)
2016-09-29 07:18Distribution SiteLocky
inform-ug.ru
REGRU-RU185.17.120.8 (- Russian Federation)
2016-09-29 07:18Distribution SiteLocky
aarontax.com
GODADDY.COM, LLC107.180.2.55 (- United States)
2016-09-29 07:18Distribution SiteLocky
kiengianginfo.com
ONLINENIC, INC.210.245.87.32 (- Vietnam)
2016-09-29 07:18Distribution SiteLocky
qualitycontrol-egypt.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]144.217.20.181 (- United States)
2016-09-29 07:18Distribution SiteLocky
bansarnfun.com
DOMAIN.COM, LLC27.254.40.109 (- Thailand)
2016-09-29 07:18Distribution SiteLocky
latticent.com
NET 4 INDIA LIMITED (n/a)
2016-09-29 07:18Distribution SiteLocky
28amen.org
Namesilo, LLC23.254.87.164 (- United States)
2016-09-29 07:17Distribution SiteLocky
kranakha.net
KEY-SYSTEMS GMBH (n/a)
2016-09-29 07:17Distribution SiteLocky
voizplus.com
ONLINENIC, INC.210.1.51.164 (- Thailand)
2016-09-29 07:17Distribution SiteLocky
northerncards.com
GODADDY.COM, LLC107.180.48.249 (- United States)
2016-09-29 07:08Distribution SiteLocky
aseandates.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-29 06:58Payment SiteCerber
unocl45trpuoefft.lzskva.bid
Eranet International Limited (n/a)
2016-09-29 06:51Payment SiteCerber
52uo5k3t73ypjije.vlo18w.bid
Eranet International Limited (n/a)
2016-09-29 05:45Payment SiteCerber
wjtqjleommc4z46i.hom07d.bid
Eranet International Limited (n/a)
2016-09-29 03:16Payment SiteCerber
wjtqjleommc4z46i.p41khf.bid
Eranet International Limited (n/a)
2016-09-29 02:47Payment SiteCerber
unocl45trpuoefft.barzc4.bid
Eranet International Limited (n/a)
2016-09-29 02:28Payment SiteCerber
wjtqjleommc4z46i.54vw9b.bid
Eranet International Limited (n/a)
2016-09-29 02:24Payment SiteCerber
wjtqjleommc4z46i.cdyd2z.bid
Eranet International Limited (n/a)
2016-09-29 01:08Payment SiteCerber
4kqd3hmqgptupi3p.getsbug.kim
Alpnames Limited (n/a)
2016-09-28 22:15Payment SiteCerber
4kqd3hmqgptupi3p.selfcrash.site
AlpNames Limited (n/a)
2016-09-28 20:39Payment SiteCerber
wjtqjleommc4z46i.35rof4.bid
Eranet International Limited (n/a)
2016-09-28 19:26Payment SiteCerber
4kqd3hmqgptupi3p.namefalls.pro
(n/a)
2016-09-28 19:20Payment SiteCerber
wjtqjleommc4z46i.oodvxp.bid
Eranet International Limited (n/a)
2016-09-28 18:31Distribution SiteLocky
chimesmedia.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]45.40.138.63 (- United States)
2016-09-28 18:22Distribution SiteLocky
villaangela.info
PDR Ltd. d/b/a PublicDomainRegis[...]178.249.187.200 (- Italy)
2016-09-28 18:22Distribution SiteLocky
mepowell.com
TUCOWS DOMAINS INC.192.0.78.24 (- United States) +1 A record(s) 192.0.78.25 (AS2635, - United States)
2016-09-28 16:33Payment SiteCerber
wjtqjleommc4z46i.d11zjd.bid
Eranet International Limited (n/a)
2016-09-28 14:53Payment SiteTorrentLocker
anbqjdoyw6wkmpeu.oldtrees.at
(n/a)

# of rows displayed: 100
# of entries in database: 12'828

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >