ZeuS Tracker :: Monitor

Below is a list of all ZeuS C&Cs as well as Fake URLs which are currently known to ZeuS Tracker. You can browse the ZeuS Tracker to get a list of ZeuS C&Cs and FakeURLs for a specified country or AS. Additionally, ZeuS Tracker provides a feature which allows to filter the ZeuS C&Cs for specified nameservers, level, status and many more.

Each ZeuS C&C or FakeURL is tagged with a level. The level indicates which kind of IP the Host is hosted on. Here is an overview about the levels and its meaning:

Level Description
Level 1 Bulletproof hosted
Level 2 Hacked webserver
Level 3 Free hosting service
Level 4 Unknown
Level 5 Hosted on a FastFlux botnet

Additionally, every host is at least in one of the following category:

You can also search the ZeuS Tracker for domains, IPs, urls, MD5 hashes or FakeURLs:

Browse: ZeuS BinaryURLs | ZeuS ConfigURLs | ZeuS Dropzones
Malware family filter: ZeuS | Ice IX | Citadel | KINS
Set a filter for the list below: Remove filter (Show all) | online ZeuS hosts | offline ZeuS hosts | ZeuS hosts with files online | order by lastupdated
Filter C&C server tagged with level: Level 1 (Bulletproof) | Level 2 (Hijacked sites) | Level3 (Free webhosting) | Level 4 (Unknown) | Level 5 (FastFlux hosted)

feed Subscribe this list via RSS feed


DateaddedMalwareHostIP addressLevelStatusFiles OnlineSBLCountryAS numberUptime
2018-08-10Citadelhi-j.com82.221.129.364online0SBL415351-AS50613242:51:19
2018-08-03Citadelgrati.cf4offline0Not listed- 05:45:00
2018-06-21Citadelcasaroyai.com82.221.129.194online0Not listed-AS50613838:59:59
2018-05-24Citadelfront.postmaster.services104.247.219.414online0Not listed-AS46261838:59:59
2018-05-07Citadelall-texproducts.com216.194.169.1842online0Not listed-AS22611838:59:59
2018-04-27Citadelderadprash.com4offline0Not listed- 64:50:14
2018-04-27Citadelfreshwork.email-accountsettings.online4offline0Not listed- 64:53:12
2018-04-26Citadelfroshserv.com4offline0Not listed- 20:37:17
2017-11-07Citadelslap.alliancekl.com4offline0Not listed- 50:10:43
2017-10-23Citadelflex.comonwealthplc.com4offline0Not listed- 838:59:59
2017-10-20Citadelslanted.excelonlinereader.services4offline0Not listed- 838:59:59
2017-10-18Citadeljad.fisbonline.com4offline0Not listed- 838:59:59
2017-10-07Citadelpolice-fbi.securityservice.review4offline0Not listed- 25:25:05
2017-09-29Citadelbora.studentworkbook.pw141.8.226.584online0Not listed-AS40034838:59:59
2017-09-21Citadelpandyi.com4offline0Not listed- 646:53:50
2017-09-21Citadelmalikshabas.com4offline0Not listed- 409:56:15
2017-09-15Citadelanderlechti.com4offline0Not listed- 781:56:03
2017-09-01Citadelburn.settingsdata.store4offline0Not listed- 32:31:10
2017-08-31Citadelzadmj.cp-addltives.com4offline0Not listed- 166:51:14
2017-08-14Citadellisovfoxcom.418.com1.ru80.78.250.263online0Not listed-AS43146838:59:59
2017-08-04Citadeltreatstartaugusth.info4offline0Not listed- 00:00:00
2017-07-22Citadelme.centronind.club4offline0Not listed- 77:06:55
2017-07-15Citadell3d1.pp.ru194.226.41.114online0Not listed-AS15835838:59:59
2017-07-14Citadelivansaru.418.com1.ru80.78.250.264online0Not listed-AS43146838:59:59
2017-06-21Citadelgmailsecurityteam.com4offline0Not listed- 838:59:59
2017-06-13Citadelalvoportas.com.br187.191.98.2024online0Not listed-AS262545838:59:59
2017-06-06Citadelwww.poloatmer.ru89.223.26.524online0Not listed-AS201848838:59:59
2017-06-02Citadelcode.blaztech.gdn4offline0Not listed- 02:24:52
2017-06-01Citadelnsdic.pp.ru185.6.242.2511online0Not listed-AS203591838:59:59
2017-05-07Citadelroofgreen.in.ua4offline0Not listed- 838:59:59
2017-03-21Citadelfmarchzeetequwxtw.wang4offline0Not listed- 352:04:04
2017-03-19Citadelbikeshophaidli.com91.195.240.1174online0Not listed-AS47846838:59:59
2017-01-13Citadelmonsierdroider.wang4offline0Not listed- 10:21:09
2016-11-27Citadeljohnluis33.tk4offline0Not listed- 11:22:26
2016-11-09Citadelhanocomin.com4offline0Not listed- 838:59:59
2016-11-09Citadelaz-armaturen.su4offline0Not listed- 838:59:59
2016-11-01Citadeljutrack.dp.ua4offline0Not listed- 65:44:55
2016-10-28Citadeltraptrillhosts.top4offline0Not listed- 44:32:25
2016-10-15Citadeljutebags.tk4offline0Not listed- 22:46:50
2016-10-04Citadelwww.slapintins.publicvm.com67.214.175.694online0Not listed-AS12260838:59:59
2016-10-04Citadelavast-mail-security.download198.54.117.2004online0Not listed-AS22612838:59:59
2016-09-29Citadelqbhcsope.com4offline0Not listed- 838:59:59
2016-09-27Citadeldbimbem.axfree.com144.76.115.363online0Not listed-AS24940838:59:59
2016-09-25Citadelkaydayeuti.axfree.com144.76.115.363online0Not listed-AS24940838:59:59
2016-09-24Citadelciceidr.top4offline0Not listed- 40:06:14
2016-09-17Citadelexploit0day.top4offline0Not listed- 46:56:03
2016-09-05Citadelvodahelp.sytes.net194.109.64.1314online0Not listed-AS3265838:59:59
2016-09-02Citadelvinking.top4offline0Not listed- 16:56:52
2016-09-02Citadelfoxlimited.top4offline0Not listed- 838:59:59
2016-08-31Citadelwww.sunbrehden.top4offline0Not listed- 36:23:10
2016-08-29Citadeljaaphram.com4offline0Not listed- 838:59:59
2016-08-23Citadeldeserado.tk4offline0Not listed- 07:47:23
2016-08-05Citadelj0k3rj0k3r.tk4offline0Not listed- 69:39:40
2016-07-30Citadellzediamike.trade198.54.117.2004online0Not listed-AS22612838:59:59
2016-07-25Citadeldaehoshipinc.tk4offline0Not listed- 26:14:24
2016-07-16Citadelbrausincsystem.pro4offline0Not listed- 838:59:59
2016-07-14Citadelcorefwdgroup.tk4offline0Not listed- 17:47:32
2016-07-11Citadel185.35.138.22185.35.138.224unknown0SBL284619-AS62454
-
2016-07-07Citadelsuryapolix.club4offline0Not listed- 03:56:43
2016-07-05Citadelmetalexvietnamreed.tk195.20.41.2054online0Not listed-AS31624838:59:59
2016-06-22Citadelkntksales.tk195.20.44.2524online0Not listed-AS31624838:59:59
2016-06-22Citadelbanana.dp.ua4offline0Not listed- 697:51:14
2016-06-12Citadelmailslots.top4offline0Not listed- 49:31:36
2016-06-10Citadelwinhelptech.xyz4offline0Not listed- 06:14:30
2016-06-08Citadelwww.tekyalhaja.xyz4offline0Not listed- 15:25:06
2016-06-07Citadelbestboy.top4offline0Not listed- 38:25:40
2016-05-27Citadelregsways.top4offline0Not listed- 24:44:21
2016-05-22Citadelhonestme.com.ua4offline0Not listed- 838:59:59
2016-05-06Citadelbellinghambar.tk4offline0Not listed- 23:57:49
2016-05-03Citadelgskpresident.tk4offline0Not listed- 27:43:45
2016-04-21Citadelcscomnsinc.tk4offline0Not listed- 22:48:40
2016-04-13Citadel193.201.227.142193.201.227.1424unknown0Not listed-AS25092
-
2016-03-31Citadelb.1s2.in.ua4offline0Not listed- 231:51:57
2016-02-22Citadelxpipemotoring.top4offline0Not listed- 02:11:15
2016-02-22Citadelmegastats.top4offline0Not listed- 02:01:14
2015-12-11Citadelwww.antibasic.ga195.20.53.1574online0Not listed-AS31624838:59:59
2015-12-04Citadelmaminoleinc.tk195.20.41.2334online0Not listed-AS31624838:59:59
2015-11-28Citadelnasscomminc.tk195.20.44.1004online0Not listed-AS31624838:59:59
2015-10-17Citadeluptight.su4offline0Not listed- 43:11:21
2015-09-20Citadelwww.cpro.moscow1offline0Not listed- 93:36:06
2015-09-15Citadelz0bu.dynu.com4offline0Not listed- 219:22:43
2015-07-14Citadelmygoodness.in.ua4offline0Not listed- 59:25:43
2015-06-29Citadeljomo.in.ua4offline0Not listed- 838:59:59
2015-05-09Citadelkrestenbv.nl4offline0Not listed- 573:15:48
2015-04-29Citadelzetes.vdsinside.com4online0Not listed- 838:59:59
2015-04-24Citadelwww.riverwalktrader.co.za4offline0Not listed- 838:59:59
2015-04-05Citadelns513726.ip-192-99-148.net192.99.148.264online0Not listed-AS16276838:59:59
2015-03-29Citadelteeth.co.jp115.146.59.2072online0SBL251755-AS9597838:59:59
2015-02-02Citadelshadowraze.pw141.8.226.584online0Not listed-AS40034838:59:59
2015-02-02Citadelhui-ain-apparel.tk195.20.42.14online0Not listed-AS31624838:59:59
2015-01-31Citadelsperoni.pw141.8.226.584online0Not listed-AS40034838:59:59
2015-01-24Citadelwww.02level.tk4offline0Not listed- 838:59:59
2015-01-19Citadelwasabi.mine.nu4offline0Not listed- 838:59:59
2014-12-29Citadel76tguy6hh6tgftrt7tg.su4offline0Not listed- 06:27:44
2014-12-11Citadelburgerspendingbusiness.kz4offline0Not listed- 01:09:18
2014-11-24Citadel80.65.93.24180.65.93.2414unknown0SBL240664-AS9146
-
2014-11-21Citadelingenicopads.kz4offline0Not listed- 90:05:30
2014-11-10Citadel201.149.83.183201.149.83.1834unknown0SBL239380-AS14178
-
2014-10-17Citadel54g35546-5g6hbggffhb.tk4offline0Not listed- 838:59:59
2014-09-19Citadel187.174.252.247187.174.252.2474unknown0SBL234830-AS8151
-
2014-09-10Citadelbots.configbinbots.info4offline0Not listed- 838:59:59
2014-09-04Citadel103.230.84.239103.230.84.2394unknown0SBL233517-AS132717
-
2014-09-03Citadelmovieofgoodies.kz4offline0Not listed- 00:00:00
2014-09-03Citadelmoviepaidinfullsexy.kz4offline0Not listed- 02:44:18
2014-09-02Citadel120.63.157.195120.63.157.1954unknown0SBL233280-AS17813
-
2014-09-02Citadelpreapprovedloansoffline.kz4offline0Not listed- 30:28:53
2014-09-02Citadelcanadianonlineagreementservices.kz4offline0Not listed- 29:02:42
2014-08-20Citadelliveresellerweb.eu4offline0Not listed- 838:59:59
2014-08-07Citadelu8781a21.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-07-26Citadelpreapprovedloansonline.kz4offline0Not listed- 751:07:20
2014-07-20Citadel87.236.210.12487.236.210.1244unknown0SBL228910-AS57230
-
2014-07-15Citadelbranchtist.com4offline0Not listed- 838:59:59
2014-06-28Citadel58.195.1.458.195.1.44unknown0SBL226820-AS4538
-
2014-06-25Citadelvashadvokat.in.ua4offline0Not listed- 347:30:37
2014-06-16Citadelns416017.ip-37-187-144.eu4offline0Not listed- 838:59:59
2014-05-12Citadelkesikelyaf.com89.252.186.1421online0Not listed-AS42926838:59:59
2014-05-09Citadel199.201.121.185199.201.121.1854unknown0SBL221832-AS54718
-
2014-04-26Citadel199.187.129.193199.187.129.1934unknown0SBL220691-AS53834
-
2014-04-22Citadelricasad.sx4offline0Not listed- 838:59:59
2014-04-16Citadel222.29.197.232222.29.197.2321unknown0SBL219755-AS4538
-
2014-04-16Citadeldau43vt5wtrd.tk195.20.44.1094online0Not listed-AS31624838:59:59
2014-03-27Citadel190.128.29.1190.128.29.14unknown0SBL217683-AS13489
-
2014-03-27Citadelkatagi-weblogs.lolipop.jp3offline0Not listed- 838:59:59
2014-03-20Citadelupdate.timstackleshop.es4offline0Not listed- 838:59:59
2014-03-13Citadelman-street.tk4offline0Not listed- 838:59:59
2014-03-13Citadelcicero-dropbox.tk4offline0Not listed- 838:59:59
2014-03-08Citadelupdate.rifugiopontese.it37.143.11.1894online0Not listed-AS203226838:59:59
2014-03-06Citadeljayboyd.t15.org3offline0Not listed- 838:59:59
2014-03-01Citadellittwronthath.net4offline0Not listed- 838:59:59
2014-02-13Citadelserverjainpangwang.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-02-12Citadeldebservers.pw141.8.226.584online0Not listed-AS40034838:59:59
2014-01-23Citadelf8b2b9.su4offline0Not listed- 838:59:59
2014-01-02Citadelphimsex4u.biz4offline0Not listed- 838:59:59
2013-12-26Citadelnoonepa.tk4offline0Not listed- 838:59:59
2013-12-26Citadelsameetc.tk4offline0Not listed- 838:59:59
2013-12-22Citadelupdate.saintfrancoisath.be4offline0Not listed- 47:20:40
2013-12-17Citadelwww.sdspropro.co.ua4offline0Not listed- 584:44:11
2013-12-16Citadelsdspropro.co.ua4offline0Not listed- 578:59:07
2013-11-20Citadelpanel.vargakragard.se83.69.233.1214online0Not listed-AS28762838:59:59
2013-10-29Citadelresr.configure.8c1.net4offline0Not listed- 838:59:59
2013-10-18Citadelprk.firstconf.3gb.biz4offline0Not listed- 838:59:59
2013-10-06Citadelfrevolore.com4offline0Not listed- 314:47:44
2013-10-06Citadelfretiolo.com4offline0Not listed- 314:49:50
2013-10-04Citadelupdating-flash.cloudapp.net4offline0Not listed- 11:28:43
2013-10-03Citadeltradecharm.lt4offline0Not listed- 838:59:59
2013-09-07Citadelfileserver03.com4offline0Not listed- 838:59:59
2013-09-02Citadelserver.bovine-mena.com46.4.150.1114online0Not listed-AS24940838:59:59
2013-09-02Citadelwor6.b6dfnahea.ns2.name4offline0Not listed- 05:39:10
2013-07-20Citadelreserve.jumpingcrab.com4offline0Not listed- 825:51:57
2013-07-19Citadelwww.witkey.com101.200.81.1874online0Not listed-AS37963838:59:59
2013-07-13Citadelgoogle.poultrymiddleeast.com4offline0Not listed- 838:59:59
2013-06-16Citadelgate.timstackleshop.es4offline0Not listed- 792:28:11
2013-06-13Citadeljgworldupd.com4offline0Not listed- 663:15:18
2013-06-08Citadel64.85.233.864.85.233.84unknown0SBL188358-AS11404
-
2013-05-26Citadeldattinggate.com4offline0Not listed- 838:59:59
2012-10-12Citadelhruner.com50.63.202.631online0Not listed-AS26496838:59:59
2012-06-04Citadel94.103.36.5594.103.36.554unknown0SBL141535-AS47894
-

# of ZeuS C&Cs displayed: 157
# of ZeuS C&Cs in ZeuS Tracker: 447 [Remove all filters]