Ragnar Locker leak-site takedown
rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion
ransomware
Summary
The Ragnar Locker leak-site address was archived with a seizure notice on 20 October 2023. Europol reported that infrastructure had been seized in the Netherlands, Germany, and Sweden and that the associated Tor data-leak site was taken down in Sweden.
Before and after
BEFORE
No independently replayable pre-seizure capture of this exact onion address was found in the public web archives reviewed.
AFTER
Snapshot file unavailable. The metadata survived. Small victories.
Status history
- ONLINE → SEIZED
Europol confirmed the infrastructure seizure and Tor leak-site takedown; a seizure banner was archived for this address.
Record details
What happened?
The Ragnar Locker leak-site address was archived with a seizure notice on 20 October 2023. Europol reported that infrastructure had been seized in the Netherlands, Germany, and Sweden and that the associated Tor data-leak site was taken down in Sweden.
Related infrastructure
No replacement domain or mirror has been confirmed.
Related ransomware research
Extortion Wiki documents the actor, negotiations, ransom notes, victims, and related ransomware activity.
Related malware research
vx-underground provides malware-family samples and technical research. These links provide family context and do not serve as evidence for the takedown documented above.
Sources
Record quality
Found an error?
Send the record URL, the incorrect claim, and a source supporting the correction. “My friend said so” remains unsupported even when your friend types confidently.