| Date | IP Address |
| 2022-03-02 | 52.32.41.7 (ClassC) |
| 2022-09-10 | 44.240.80.246 (ClassC) |
| 2025-11-20 | 151.181.219.153 (ClassC) |
| Date | Domain | IP |
| v2.tasking.ransomwarerewind.com | 2025-08-05 | 151.181.219.154 |
| v2-agent.tasking.ransomwarerewind.com | 2025-11-20 | 151.181.219.153 |
| auth.ransomwarerewind.com | 2024-12-27 | 99.84.66.121 |
| www.ransomwarerewind.com | 2024-08-23 | 52.42.122.102 |