Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage | GlobeImposter

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-15 11:31Distribution SiteLocky
discoverstillwater.com
GODADDY.COM, LLC104.196.178.8 (- United States)
2016-09-15 11:30Distribution SiteLocky
sapanboon.com
NAME.COM, INC.210.1.51.131 (- Thailand)
2016-09-15 11:30Distribution SiteLocky
oliveservicedapartments.com
DOMAINSITE, INC.144.76.184.241 (- Germany)
2016-09-15 11:30Distribution SiteLocky
lusanmaster.com
NETEARTH ONE INC. D/B/A NETEARTH (n/a)
2016-09-15 11:29Distribution SiteLocky
keratin.sk
85.248.29.36 (- Slovakia)
2016-09-15 11:29Distribution SiteLocky
salarypra1.net
ONLINENIC, INC. (n/a)
2016-09-15 11:28Distribution SiteLocky
lowcostveterinarios.com
GODADDY.COM, LLC (n/a)
2016-09-15 11:28Distribution SiteLocky
sandpiperchorus.us
TUCOWS DOMAINS INC.23.235.192.117 (- United States)
2016-09-15 11:28Distribution SiteLocky
bigfishcasting.com
GODADDY.COM, LLC184.168.203.1 (- United States)
2016-09-15 11:27Distribution SiteLocky
eiti.co.il
80.244.168.32 (- Israel)
2016-09-15 11:26Distribution SiteLocky
charlcote1.net
TUCOWS DOMAINS INC.104.31.76.84 (- United States) +1 A record(s) 104.31.77.84 (AS13335, - United States)
2016-09-15 11:25Distribution SiteLocky
dendang.net
WEB COMMERCE COMMUNICATIONS LIMI[...]210.5.47.92 (- Malaysia)
2016-09-15 11:24Distribution SiteLocky
1natureresort.com
DOMAIN.COM, LLC50.116.67.96 (- United States)
2016-09-15 11:24Distribution SiteLocky
insieutoc.com
ONLINENIC, INC.35.194.186.252 (- United States)
2016-09-15 11:24Distribution SiteLocky
iassess.net
GODADDY.COM, LLC (n/a)
2016-09-15 11:23Distribution SiteLocky
trudprom.ru
R01-RU87.236.19.118 (- Russian Federation)
2016-09-15 11:23Distribution SiteLocky
rimpro.ru
REGTIME-RU178.57.217.251 (- Russian Federation)
2016-09-15 11:22Distribution SiteLocky
credit-it.com
DEUTSCHE TELEKOM AG80.150.6.143 (- Germany)
2016-09-15 11:21Distribution SiteLocky
allovercoupon.com
GODADDY.COM, LLC155.254.31.52 (- United States)
2016-09-15 11:21Distribution SiteLocky
lacumpa.biz
ENOM, INC.172.96.184.141 (- Canada)
2016-09-15 11:21Distribution SiteLocky
electua.org
Internet Invest, Ltd. dba Imena.[...] (n/a)
2016-09-15 11:21Distribution SiteLocky
hawaiipoliticalinfo.org
GoDaddy.com, LLC107.180.40.142 (- United States)
2016-09-15 11:20Distribution SiteLocky
techboss.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.222 (- United States)
2016-09-15 11:19Distribution SiteLocky
mumbomedia.nl
Mijn InternetOplossing B.V.5.22.250.203 (- Netherlands)
2016-09-15 11:19Distribution SiteLocky
kf-design.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]91.185.209.164 (- Slovenia)
2016-09-15 11:19Distribution SiteLocky
zharikoff.ru
RU-CENTER-RU185.12.92.184 (- Russian Federation)
2016-09-15 11:18Distribution SiteLocky
iandistudio.com
GODADDY.COM, LLC194.102.215.57 (- Romania)
2016-09-15 11:18Distribution SiteLocky
espaciosamadhi.com
WILD WEST DOMAINS, LLC173.254.120.22 (- United States)
2016-09-15 11:18Distribution SiteLocky
bet4good.org
GoDaddy.com, LLC74.220.199.6 (- United States)
2016-09-15 11:17Distribution SiteLocky
ocscexpo.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]72.52.4.119 (- United States)
2016-09-15 11:17Distribution SiteLocky
onefilmy.com
GODADDY.COM, LLC52.58.78.16 (- Germany)
2016-09-15 11:17Distribution SiteLocky
gearstuff.net
NETWORK SOLUTIONS, LLC.162.252.104.174 (- United States)
2016-09-15 11:16Distribution SiteLocky
delicefilm.com
GODADDY.COM, LLC94.73.151.111 (- Turkey)
2016-09-15 11:16Distribution SiteLocky
pasbardejov.sk
81.162.94.2 (- Slovakia)
2016-09-15 09:56Distribution SiteLocky
vilakolpa.com
TUCOWS DOMAINS INC.66.49.197.111 (- Canada)
2016-09-15 09:55Distribution SiteLocky
lorihoneycutt.com
GKG.NET, INC.192.185.71.161 (- United States)
2016-09-15 09:54Distribution SiteLocky
brainfreezeapp.com
GODADDY.COM, LLC (n/a)
2016-09-15 09:54Distribution SiteLocky
nomad-gps.com
ONLINENIC, INC.92.46.121.108 (- Kazakhstan)
2016-09-15 09:54Distribution SiteLocky
sekerpinarcicek.com
IHS TELEKOM, INC.185.131.50.174 (- Turkey)
2016-09-15 09:54Distribution SiteLocky
mortaltraffic.com
ENOM, INC.204.11.56.48 (- Virgin Islands)
2016-09-15 09:54Distribution SiteLocky
ichinoyado.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]157.112.181.25 (- Japan)
2016-09-15 09:53Distribution SiteLocky
pegglenights.org
1 & 1 Internet AG82.223.26.214 (- Spain)
2016-09-15 09:53Distribution SiteLocky
sbaky.com
GODADDY.COM, LLC184.168.221.60 (- United States)
2016-09-15 09:52Distribution SiteLocky
ismaily.net
PDR LTD. D/B/A PUBLICDOMAINREGIS[...] (n/a)
2016-09-15 09:52Distribution SiteLocky
knightsbridgeboutique.com
EVERYONES INTERNET, LTD. DBA SOF[...] (n/a)
2016-09-15 09:52Distribution SiteLocky
swapol.net
WILD WEST DOMAINS, LLC (n/a)
2016-09-15 09:52Distribution SiteLocky
tymelprof.ru
AGAVA-RU217.107.219.47 (- Russian Federation)
2016-09-15 09:51Distribution SiteLocky
akeseverin.com
REGISTER.IT SPA185.2.5.23 (- Italy)
2016-09-15 09:51Distribution SiteLocky
mikbaro.com
10DENCEHISPAHARD, S.L134.0.11.63 (- Spain)
2016-09-15 09:50Distribution SiteLocky
vernpucka.net
JSC REGISTRAR R01184.105.192.2 (- United States)
2016-09-15 09:50Distribution SiteLocky
monsalwa.com
GODADDY.COM, LLC104.24.126.56 (- United States) +1 A record(s) 104.24.127.56 (AS13335, - United States)
2016-09-15 09:49Distribution SiteLocky
forex-trading.nl
Flexwebhosting BV46.17.2.169 (- Netherlands)
2016-09-15 09:48Distribution SiteLocky
fedoriv.net
ONLINENIC, INC.193.200.173.104 (- Ukraine)
2016-09-15 09:48Distribution SiteLocky
wyvesnarl.info
PakNIC (Private) Limited184.105.192.2 (- United States)
2016-09-15 09:47Distribution SiteLocky
wyvesnarl.info
PakNIC (Private) Limited184.105.192.2 (- United States)
2016-09-15 09:46Distribution SiteLocky
beytascam.com
REGISTER.COM, INC.185.42.172.189 (- Turkey)
2016-09-15 09:46Distribution SiteLocky
esmahatun.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]185.85.191.230 (- Turkey)
2016-09-15 09:45Distribution SiteLocky
normadnex.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-15 09:45Distribution SiteLocky
bingolfm.com
IHS TELEKOM, INC.94.138.207.226 (- Turkey)
2016-09-15 09:44Distribution SiteLocky
normadnex.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-15 09:44Distribution SiteLocky
siamitcool.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.222 (- United States)
2016-09-15 09:43Distribution SiteLocky
nablussweet.com
GODADDY.COM, LLC18.221.5.142 (- United States)
2016-09-15 09:43Distribution SiteLocky
smokingbrushfineart.com
ENOM, INC.109.75.171.120 (- United Kingdom)
2016-09-15 09:42Distribution SiteLocky
gray-associates.co.uk
Fasthosts Internet Ltd54.246.209.119 (- Ireland)
2016-09-15 09:42Distribution SiteLocky
geototalgroup.com
TUCOWS DOMAINS INC.70.33.246.120 (- Canada)
2016-09-15 09:41Distribution SiteLocky
xn--o3cafudv5hceh20a.com
ONLINENIC, INC.210.1.60.27 (- Thailand)
2016-09-15 09:41Distribution SiteLocky
vernpucka.net
JSC REGISTRAR R01184.105.192.2 (- United States)
2016-09-15 09:11Payment SiteCerber
52uo5k3t73ypjije.fi50le.bid
Eranet International Limited (n/a)
2016-09-15 06:31Payment SiteCerber
unocl45trpuoefft.hvh2gb.bid
Eranet International Limited (n/a)
2016-09-15 04:42Payment SiteCerber
52uo5k3t73ypjije.catfills.mobi
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-15 01:23Payment SiteCerber
wjtqjleommc4z46i.4bb9vz.bid
Eranet International Limited (n/a)
2016-09-14 22:41Payment SiteCerber
52uo5k3t73ypjije.vmotsf.bid
Eranet International Limited (n/a)
2016-09-14 20:51Payment SiteCerber
52uo5k3t73ypjije.pr2zwz.bid
Eranet International Limited (n/a)
2016-09-14 20:12Distribution SiteLocky
pawlrubia.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-14 20:11Distribution SiteLocky
moismdheri.net
KEY-SYSTEMS GMBH (n/a)
2016-09-14 20:10Distribution SiteLocky
rokerlelia.net
KEY-SYSTEMS GMBH (n/a)
2016-09-14 20:09Distribution SiteLocky
pradran.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-14 20:09Distribution SiteLocky
amrastacy.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-14 20:04Distribution SiteLocky
tearyrecce.com
KEY-SYSTEMS GMBH (n/a)
2016-09-14 18:44Payment SiteCerber
4kqd3hmqgptupi3p.scoreable.bid
Alpnames Limited (n/a)
2016-09-14 15:58Payment SiteCerber
4kqd3hmqgptupi3p.hotcopies.bid
Alpnames Limited (n/a)
2016-09-14 13:33Distribution SiteLocky
knife-gold.ru
REGRU-RU81.177.139.81 (- Russian Federation)
2016-09-14 13:32Distribution SiteLocky
jaysilverdp.com
MELBOURNE IT, LTD. D/B/A INTERNE[...]184.168.131.241 (- United States)
2016-09-14 13:32Distribution SiteLocky
thejollysanta.com
GODADDY.COM, LLC (n/a)
2016-09-14 13:32Distribution SiteLocky
forumcidadao.com.br
(n/a)
2016-09-14 13:31Distribution SiteLocky
infotenerife.biz
DYNADOT LLC (n/a)
2016-09-14 13:31Distribution SiteLocky
xaydungtruonghung.com
P.A. VIET NAM COMPANY LIMITED112.213.84.58 (- Vietnam)
2016-09-14 13:31Distribution SiteLocky
montazh5.ru
R01-RU89.111.176.183 (- Russian Federation)
2016-09-14 13:30Distribution SiteLocky
blackssabbath.ru
R01-RU (n/a)
2016-09-14 13:29Distribution SiteLocky
dusklounge.com
ENOM, INC.173.255.131.205 (- United States)
2016-09-14 13:29Distribution SiteLocky
baanpalad.com
ONLINENIC, INC.151.106.5.165 (- United States)
2016-09-14 13:27Distribution SiteLocky
limret.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]52.192.173.220 (- Japan)
2016-09-14 13:27Distribution SiteLocky
xn--odka862xw00d.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]114.160.88.110 (- Japan)
2016-09-14 13:26Distribution SiteLocky
kientrucvui.com
ONLINENIC, INC.123.30.181.205 (- Vietnam)
2016-09-14 13:25Distribution SiteLocky
sushi16.ru
REGRU-RU23.236.62.147 (- United States)
2016-09-14 13:23Distribution SiteLocky
cabincrewdiaries.com
1&1 INTERNET SE (n/a)
2016-09-14 13:23Distribution SiteLocky
yourmdb.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-09-14 13:23Distribution SiteLocky
inventtheworld.com
GODADDY.COM, LLC41.193.54.15 (- South Africa)
2016-09-14 13:21Distribution SiteLocky
fleurdelysbridal.co.uk
123-Reg Limited t/a 123-reg104.18.48.81 (- United States) +1 A record(s) 104.18.49.81 (AS13335, - United States)
2016-09-14 13:21Distribution SiteLocky
natural-anxiety-remedies.com
1&1 INTERNET SE174.127.104.112 (- United States)

# of rows displayed: 100
# of entries in database: 13'867

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 >