Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2018-02-04 23:06Botnet C&CLocky
waduavfijwkanvf.xyz
Namecheapn/a
2018-01-18 09:09Botnet C&CLocky
uxwavkmttywsuynt.pw
141.8.226.58 (- Switzerland)
2018-01-12 13:13Distribution SiteGlobeImposter
mikeylinehan.com
NameCheap Inc.199.188.200.96 (- United States)
2018-01-12 13:13Distribution SiteGlobeImposter
nwfpakistan.com
NameCheap Inc.199.188.200.149 (- United States)
2018-01-12 13:13Distribution SiteGlobeImposter
loquiereslotienesya.com
PDR Ltd. d/b/a PublicDomainRegis[...]198.54.114.136 (- United States)
2018-01-12 12:08Distribution SiteGlobeImposter
jcvitalis.com
NameCheap Inc.199.188.200.146 (- United States)
2018-01-12 12:08Distribution SiteGlobeImposter
lasercutlawncare.com
GoDaddy.com, LLC198.54.116.65 (- United States)
2018-01-12 12:08Distribution SiteGlobeImposter
icilarache.com
NameCheap Inc.199.188.200.144 (- United States)
2018-01-12 12:01Distribution SiteGlobeImposter
sigyn-ug.com
NameCheap Inc.198.54.115.163 (- United States)
2018-01-12 12:01Distribution SiteGlobeImposter
stainlessengineeringintl.com
NameCheap Inc.199.188.200.95 (- United States)
2018-01-12 12:01Distribution SiteGlobeImposter
primarynotes.online
NameCheap (n/a)
2018-01-12 12:01Distribution SiteGlobeImposter
reyplastica.com
NameCheap Inc.199.188.200.95 (- United States)
2018-01-12 12:01Distribution SiteGlobeImposter
oracellbd.com
NameSilo, LLC198.54.116.224 (- United States)
2018-01-12 12:01Distribution SiteGlobeImposter
ourmobilepcs.com
NameCheap Inc.198.54.116.231 (- United States)
2018-01-12 12:01Distribution SiteGlobeImposter
urbantechits.com
NameCheap Inc.199.188.200.148 (- United States)
2017-12-30 08:40Distribution SiteGlobeImposter
redalumni.com
NameCheap Inc.198.54.114.198 (- United States)
2017-12-30 08:40Distribution SiteGlobeImposter
cfanetwork.org
Wild West Domains, LLC184.168.221.29 (- United States)
2017-12-29 08:12Distribution SiteGlobeImposter
cugaituoianthai.com
GMO Internet, Inc. dba Onamae.co[...]203.162.123.41 (- Vietnam)
2017-12-29 08:12Distribution SiteGlobeImposter
iglesiaciudaddedios.com
Wild West Domains, LLC50.62.245.1 (- United States)
2017-12-29 08:12Distribution SiteGlobeImposter
kooshesh-co.com
Hosting Concepts B.V. d/b/a Open[...]107.173.228.238 (- United States)
2017-12-28 11:22Distribution SiteGlobeImposter
yourappyourway.com
NameCheap Inc.199.188.200.96 (- United States)
2017-12-28 11:22Distribution SiteGlobeImposter
standardfederalproperties.com
Name.com, Inc. (n/a)
2017-12-28 11:22Distribution SiteGlobeImposter
slimthrive.net
NameCheap Inc.104.27.164.26 (- United States) +1 A record(s) 104.27.165.26 (AS13335, - United States)
2017-12-28 11:22Distribution SiteGlobeImposter
swarm-solutions.com
GoDaddy.com, LLC50.62.228.1 (- United States)
2017-12-28 11:22Distribution SiteGlobeImposter
zeeshanasghar.website
NameCheap (n/a)
2017-12-28 11:22Distribution SiteGlobeImposter
weserve.world
NameCheap199.188.200.150 (- United States)
2017-12-28 11:22Distribution SiteGlobeImposter
berkahbajamakmur.com
PDR Ltd. d/b/a PublicDomainRegis[...]209.99.40.223 (- United States)
2017-12-27 16:49Distribution SiteGlobeImposter
www.dlamure.com
PDR Ltd. d/b/a PublicDomainRegis[...]94.102.0.149 (- Turkey)
2017-12-27 16:49Distribution SiteGlobeImposter
www.huntingcargos.com
PDR Ltd. d/b/a PublicDomainRegis[...]46.21.147.252 (- Netherlands)
2017-12-27 16:49Distribution SiteGlobeImposter
www.tiendatresort.com.vn
112.78.2.99 (- Vietnam)
2017-12-27 16:48Distribution SiteGlobeImposter
www.gnezdodesign.ru
REGRU-RU109.234.157.62 (- Russian Federation)
2017-12-27 16:48Distribution SiteGlobeImposter
www.gateleben.com
PDR Ltd. d/b/a PublicDomainRegis[...]185.179.158.26 (- Romania)
2017-12-27 16:48Distribution SiteGlobeImposter
www.equilibriumm.com
Nominalia Internet S.L.107.154.158.80 (- United States)
2017-12-27 14:24Distribution SiteGlobeImposter
www.richardwillettphotography.com
GoDaddy.com, LLC34.233.12.25 (- United States)
2017-12-27 14:24Distribution SiteGlobeImposter
www.ekremmutlu.com
FBS Inc. (n/a)
2017-12-27 14:24Distribution SiteGlobeImposter
www.smartwashingtonhomebuyers.com
NameCheap Inc.199.188.200.143 (- United States)
2017-12-27 14:24Distribution SiteGlobeImposter
www.seoforecommerce.org
NameCheap, Inc.199.188.200.140 (- United States)
2017-12-27 14:24Distribution SiteGlobeImposter
www.almarjantobacco.com
Tucows Domains Inc.41.185.8.111 (- South Africa)
2017-12-27 14:24Distribution SiteGlobeImposter
www.agenterbaik88.com
GoDaddy.com, LLC154.16.244.20 (- United States)
2017-12-27 14:24Distribution SiteGlobeImposter
www.webseorank.org
NameCheap, Inc.184.168.221.104 (- United States)
2017-12-26 17:05Distribution SiteGlobeImposter
www.caynannews.com
PDR Ltd. d/b/a PublicDomainRegis[...]213.168.251.122 (- United Kingdom)
2017-12-26 17:04Distribution SiteGlobeImposter
www.ta-pu.ir
164.215.130.66 (- Iran)
2017-12-26 17:04Distribution SiteGlobeImposter
www.pspmagic.ru
REGTIME-RU (n/a)
2017-12-26 17:04Distribution SiteGlobeImposter
www.thedournalist.com
Tucows Domains Inc.86.106.30.37 (- Romania)
2017-12-26 17:04Distribution SiteGlobeImposter
www.trafik-site.ru
REGRU-RU31.31.196.247 (- Russian Federation)
2017-12-26 17:04Distribution SiteGlobeImposter
www.simpleaftercare.co.uk
Kualo Ltd185.181.116.171 (- United Kingdom)
2017-12-26 17:04Distribution SiteGlobeImposter
www.software24x7.us
Tucows Domains Inc.208.112.85.135 (- United States)
2017-12-26 17:04Distribution SiteGlobeImposter
www.zhaksylyk.kz
HOSTER.KZ185.98.7.180 (- Kazakhstan)
2017-12-26 11:32Botnet C&CLocky
exnqhgk.xyz
Namecheap208.100.26.251 (- United States)
2017-12-22 20:43Botnet C&CLocky
yuertao.pw
Namecheap208.100.26.251 (- United States)
2017-12-22 11:29Distribution SiteGlobeImposter
www.topcareerguide.info
GoDaddy.com, LLC50.62.25.129 (- United States)
2017-12-22 11:29Distribution SiteGlobeImposter
www.sigmahydraulics.com
PDR Ltd. d/b/a PublicDomainRegis[...]103.235.105.64 (- India)
2017-12-22 11:29Distribution SiteGlobeImposter
www.vayvonvietcombank24h.net
GMO Internet, Inc. dba Onamae.co[...]203.162.123.41 (- Vietnam)
2017-12-22 11:29Distribution SiteGlobeImposter
www.shopstation.com.au
GoDaddy.com, LLC (n/a)
2017-12-22 11:29Distribution SiteGlobeImposter
www.bodyclassics.org
Tucows Inc.67.59.136.100 (- United States)
2017-12-22 11:29Distribution SiteGlobeImposter
www.upperlensmagazine.com
PDR Ltd. d/b/a PublicDomainRegis[...]45.126.209.154 (- Singapore)
2017-12-22 11:29Distribution SiteGlobeImposter
www.erpbizsolutions.com
Tucows Domains Inc.67.59.136.100 (- United States)
2017-12-21 12:05Distribution SiteGlobeImposter
www.homody.com
NameCheap Inc.184.154.46.39 (- United States)
2017-12-21 12:05Distribution SiteGlobeImposter
www.mcwhorterdesign.com
GoDaddy.com, LLC184.168.38.1 (- United States)
2017-12-21 12:05Distribution SiteGlobeImposter
www.topanswertips.info
GoDaddy.com, LLC50.62.25.129 (- United States)
2017-12-21 12:04Distribution SiteGlobeImposter
www.tuminsaat.com
GoDaddy.com, LLC50.62.232.1 (- United States)
2017-12-21 12:04Distribution SiteGlobeImposter
www.g-v-s.ru
REGRU-RU31.31.196.244 (- Russian Federation)
2017-12-21 12:04Distribution SiteGlobeImposter
www.seffafkartvizitim.com
FBS Inc.185.111.232.52 (- Cyprus)
2017-12-20 18:44Distribution SiteGlobeImposter
www.bodyprecinct.com.au
NetRegistry202.124.241.200 (- Australia)
2017-12-20 18:44Distribution SiteGlobeImposter
www.tedwoodworking.pro
(n/a)
2017-12-20 18:44Distribution SiteGlobeImposter
www.nettoyage-plafond.com
OVH54.36.121.227 (- United States)
2017-12-20 18:43Distribution SiteGlobeImposter
www.sc-otdushina.ru
RU-CENTER-RU87.236.16.215 (- Russian Federation)
2017-12-20 16:59Distribution SiteGlobeImposter
brendo.biz
eNom, LLC103.26.41.24 (- Singapore)
2017-12-20 16:59Distribution SiteGlobeImposter
gilgroup.com
Network Solutions, LLC.216.177.130.203 (- United States)
2017-12-20 16:59Distribution SiteGlobeImposter
gug-gummi.com
CPS-Datensysteme GmbH89.22.105.186 (- Germany)
2017-12-20 16:59Distribution SiteGlobeImposter
emmabeckerle.com
Network Solutions, LLC.65.44.220.51 (- United States)
2017-12-19 19:35Distribution SiteGlobeImposter
intra.cfecgcaquitaine.com
NUXIT94.247.178.77 (- France)
2017-12-19 19:35Distribution SiteGlobeImposter
depomedikal.com
GoDaddy.com, LLC82.151.131.234 (- Turkey)
2017-12-19 19:35Distribution SiteGlobeImposter
atakan.com
Register.com, Inc.212.252.45.46 (- Turkey)
2017-12-19 19:35Distribution SiteGlobeImposter
asesoreszapico.com
Arsys Internet, S.L. d/b/a NICLI[...]168.63.98.233 (- Netherlands)
2017-12-19 19:35Distribution SiteGlobeImposter
dynatec-online.com
1 API GmbH91.201.56.11 (- Switzerland)
2017-12-19 19:35Distribution SiteGlobeImposter
bodywork-sf.net
eNom, Inc. (n/a)
2017-12-19 19:35Distribution SiteGlobeImposter
2-wave.com
GMO Internet, Inc. dba Onamae.co[...]209.54.62.81 (- United States)
2017-12-19 12:57Distribution SiteGlobeImposter
3e.com.pt
174.141.224.179 (- United States)
2017-12-19 12:57Distribution SiteGlobeImposter
agricom.it
WIDE-REG195.225.168.230 (- Italy)
2017-12-15 18:42Botnet C&CLocky
31.202.130.9
31.202.130.9 (- Ukraine)
2017-12-15 09:34Distribution SiteGlobeImposter
peopleiknow.org
Domain.com, LLC67.210.102.240 (- United States)
2017-12-15 09:34Distribution SiteGlobeImposter
grindelwald.ferienimboden.com
United-Domains AG88.99.172.182 (- Germany)
2017-12-15 09:34Distribution SiteGlobeImposter
l-ardagnole.com
eNom, Inc. (n/a)
2017-12-15 09:34Distribution SiteGlobeImposter
420ent.com
eNom, Inc. (n/a)
2017-12-15 09:34Distribution SiteGlobeImposter
ericajoy.com
eNom, Inc. (n/a)
2017-12-15 09:34Distribution SiteGlobeImposter
conxibit.com
Melbourne IT, Ltd. d/b/a Interne[...]27.121.67.67 (- Australia)
2017-12-13 17:15Distribution SiteGlobeImposter
pesonamas.co.id
202.169.44.149 (- Indonesia)
2017-12-13 17:15Distribution SiteGlobeImposter
conxibit.com
Melbourne IT, Ltd. d/b/a Interne[...]27.121.67.67 (- Australia)
2017-12-13 17:15Distribution SiteGlobeImposter
itsmaterial.us
eNom, LLC98.124.252.176 (- United States)
2017-12-13 17:14Distribution SiteGlobeImposter
ericajoy.com
eNom, Inc. (n/a)
2017-12-13 17:14Distribution SiteGlobeImposter
truhlarstvi-bezdeka.cz
REG-ZONER77.48.30.85 (- Czech Republic)
2017-12-13 17:14Distribution SiteGlobeImposter
depomedikal.com
GoDaddy.com, LLC82.151.131.234 (- Turkey)
2017-12-13 17:14Distribution SiteGlobeImposter
brendo.biz
eNom, LLC103.26.41.24 (- Singapore)
2017-12-13 17:14Distribution SiteGlobeImposter
gilgroup.com
Network Solutions, LLC.216.177.130.203 (- United States)
2017-12-13 17:14Distribution SiteGlobeImposter
leicon.it
REGISTER-REG98.124.252.131 (- United States)
2017-12-13 17:14Distribution SiteGlobeImposter
laveentrading.com
eNom, Inc. (n/a)
2017-12-13 17:14Distribution SiteGlobeImposter
hwayou.com.tw
WebCC Ltd.60.199.166.91 (- Taiwan)
2017-12-13 16:47Distribution SiteGlobeImposter
basedow-bilder.de
194.116.187.130 (- Germany)
2017-12-13 16:47Distribution SiteGlobeImposter
motifahsap.com
PDR Ltd. d/b/a PublicDomainRegis[...]188.132.180.113 (- Turkey)

# of rows displayed: 100
# of entries in database: 13'843

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 >