Ransomware IPs & domains — live threat feed

Infrastructure linked to ransomware operations and leak sites. Aggregated from 100+ threat intelligence sources, refreshed daily.

122

Malicious IPs

3,021

Malicious domains

2026-07-13

Last updated

Recently listed IPs

Recently listed domains

pdaqrwgbpsuycpplc.sup27dokhpz2n7nvgr.14udep.top4kqd3hmqgptupi3p.k7oud1.topvyohacxzoue32vvk.c4cwr4.bidqfjhpgbefuhenjp7.1mnsg6.topqnqlfdthdyidbw.beficpn.frhjhqmbxyinislkkt.1j43kf.toplbbov7weoojwnqytnjqygmglkwtim5dvyw3xvoluk5ostz75ofd6enqd.onionmyobtain.comprest54538hnksjn4kjfwdbhwere.hotchunman.comxrhwryizf5mui7a5.uw9x7z.bidfnmi62725zfti2vy.17vj7b.topopen1vpn.comrbdtujaxgleucvcq.pwp27dokhpz2n7nvgr.1cvmb4.toplockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion.lyuganqmfvoxw.itydgsjrjqotlffitfg.orgbukaguka.comwjtqjleommc4z46i.au6d1d.bidagywyxedak.blasters.bizpedalcars.ruvhcrhadppxa.itp54dhkus4tlkfashdb6vjetgsdfg.greetingshere.atunocl45trpuoefft.f17bam.bidbackup1service.comtodevelopskills.com1bwh8a.topunocl45trpuoefft.7tooul.bidvyohacxzoue32vvk.mpduf5.bidyoursuperservice.comegovrxvuspxck.begurj5i6cvyi.netomeaswslhgdw.xyz52uo5k3t73ypjije.zda7bk.topwjtqjleommc4z46i.54vw9b.bidcerberhhyed5frqa.zgf48j.winsifetsere.comuuvuhqhnwnpdy.orglfdachijzuwx4bc4.fwzxnb.bidhjhqmbxyinislkkt.1dvqvh.topuwanakygoz.blasters.bizunocl45trpuoefft.v4kx51.bid52uo5k3t73ypjije.ij0cia.bidkrpphdlu.ytunocl45trpuoefft.awspm2.top52uo5k3t73ypjije.lio2wr.bidnnrtsdf34dsjhb23rsdf.spannflow.comikhorqfhcjcbbkvgs.suuxwavkmttywsuynt.pwcerberhhyed5frqa.lfotp5.toplockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onionffoqr3ug7m726zou.1gtx3p.topcerberhhyed5frqa.m5fgoi.winhjhqmbxyinislkkt.17kc8y.topclearhelperinthischekmachine-advisorworld.monstervyohacxzoue32vvk.ewfp5y.bidp27dokhpz2n7nvgr.1lt2pn.topj3qxmk6g5sk3zw62i2yhjnwmhm55rfz47fdyfkhaithlpelfjdokdxad.onion

Other threat categories