OrganisationCurrently listed

Zservers

Listed by OFAC SDN (US), UK Sanctions List
Russia, Netherlands
First listed 2025-02-11

List entries (2)

Raw record available under each Source badge

OFAC SDN (US)Active listingID 52830

Source

Verified: copied from a structured field of an authoritative source

Source: OFAC SDN (US)
Retrieved: 2026-09-30
Extractor: ofac-xml-parser

Raw evidence

<sdnEntry>
    <uid>52830</uid>
    <lastName>ZSERVERS</lastName>
    <sdnType>Entity</sdnType>
    <programList>
      <program>CYBER3</program>
    </programList>
    <idList>
      <id>
        <uid>184794</uid>
        <idType>Organization Established Date</idType>
        <idNumber>25 Feb 2011</idNumber>
      </id>
      <id>
        <uid>184862</uid>
        <idType>Organization Type:</idType>
        <idNumber>Other information technology and computer service activities</idNumber>
      </id>
      <id>
        <uid>184793</uid>
        <idType>Website</idType>
        <idNumber>Zservers.ru</idNumber>
      </id>
      <id>
        <uid>184791</uid>
        <idType>Digital Currency Address - XBT</idType>
        <idNumber>1M5N4sJ1NHb4fviLVZA5MZLKhLZqU4CPZz</idNumber>
      </id>
      <id>
        <uid>184792</uid>
        <idType>Digital Currency Address - XBT</idType>
        <idNumber>1Gekw8ACSs37oXcc5XQHvoux3iKoVFtpF4</idNumber>
      </id>
      <id>
        <uid>184871</uid>
        <idType>Digital Currency Address - XBT</idType>
        <idNumber>bc1q4yzd2rjmshm8ucrwy6dzj5rna20j0zlf8hf8vz</idNumber>
      </id>
    </idList>
    <addressList>
      <address>
        <uid>80784</uid>
        <address1>32, Jubileinaia</address1>
        <city>Barnaul</city>
        <stateOrProvince>Altai Krai</stateOrProvince>
        <postalCode>656902</postalCode>
        <country>Russia</country>
      </address>
      <address>
        <uid>80849</uid>
        <country>Netherlands</country>
      </address>
    </addressList>
  </sdnEntry>

Name on list: ZSERVERS
Programmes / regimes: CYBER3
Countries: Russia, Netherlands
Addresses: 32, Jubileinaia, Barnaul, Altai Krai, 656902, Russia
Netherlands
Identifiers: Organization Established Date: 25 Feb 2011
Organization Type:: Other information technology and computer service activities
Website: Zservers.ru
Digital Currency Address - XBT: 1M5N4sJ1NHb4fviLVZA5MZLKhLZqU4CPZz
Digital Currency Address - XBT: 1Gekw8ACSs37oXcc5XQHvoux3iKoVFtpF4
Digital Currency Address - XBT: bc1q4yzd2rjmshm8ucrwy6dzj5rna20j0zlf8hf8vz

UK Sanctions ListActive listingID CYB0064

Source

Verified: copied from a structured field of an authoritative source

Source: UK Sanctions List
Retrieved: 2026-09-29
Source date: 2025-04-09
Extractor: uk-xml-parser

Raw evidence

<Designation>
    <LastUpdated>09/04/2025</LastUpdated>
    <DateDesignated>11/02/2025</DateDesignated>
    <UniqueID>CYB0064</UniqueID>
    <OFSIGroupID>16746</OFSIGroupID>
    <Names>
      <Name>
        <Name6>ZSERVERS</Name6>
        <NameType>Primary Name</NameType>
      </Name>
      <Name>
        <Name6>Zservers</Name6>
        <NameType>Primary Name Variation</NameType>
      </Name>
    </Names>
    <RegimeName>The Cyber (Sanctions) (EU Exit) Regulations 2020</RegimeName>
    <IndividualEntityShip>Entity</IndividualEntityShip>
    <DesignationSource>UK</DesignationSource>
    <SanctionsImposed>Asset freeze|Director Disqualification Sanction</SanctionsImposed>
    <SanctionsImposedIndicators>
      <AssetFreeze>true</AssetFreeze>
      <ArmsEmbargo>false</ArmsEmbargo>
      <TargetedArmsEmbargo>false</TargetedArmsEmbargo>
      <CharteringOfShips>false</CharteringOfShips>
      <ClosureOfRepresentativeOffices>false</ClosureOfRepresentativeOffices>
      <CrewServicingOfShipsAndAircraft>false</CrewServicingOfShipsAndAircraft>
      <Deflag>false</Deflag>
      <PreventionOfBusinessArrangements>false</PreventionOfBusinessArrangements>
      <ProhibitionOfPortEntry>false</ProhibitionOfPortEntry>
      <TravelBan>false</TravelBan>
      <PreventionOfCharteringOfShips>false</PreventionOfCharteringOfShips>
      <PreventionOfCharteringOfShipsAndAircraft>false</PreventionOfCharteringOfShipsAndAircraft>
      <TechnicalAssistanceRelatedToAircraft>false</TechnicalAssistanceRelatedToAircraft>
      <TrustServicesSanctions>false</TrustServicesSanctions>
      <DirectorDisqualificationSanction>true</DirectorDisqualificationSanction>
    </SanctionsImposedIndicators>
    <OtherInformation>Incorporation date: 2/25/2011  The Director Disqualification Sanction was imposed on 09/04/2025.</OtherInformation>
    <UKStatementofReasons>
ZSERVERS has been involved in relevant cyber activity, in that by providing hosting services that support relevant cyber activity it has provided support for the commission, planning or preparation of such activity, has supplied technology and provided technical assistance that could contribute to such activity, and has carried out activities which promoted, enabled or facilitated the commission of relevant cyber activity.
  
ZSERVERS has operated from Barnaul, Russia and has promoted itself as a Bulletproof Hosting (BPH) provider. ZSERVERS has been involved in relevant cyber activity though its role providing infrastructure used in ransomware incidents and reprovisioning infrastructure for customers identified as being involved in malicious cyber activity, including those affiliated with the LockBit ransomware group. ZSERVERS infrastructure was used to host a ransomware-dedicated site connected with the leak of private information stolen from Australian health insurance company Medibank Private Limited. ZSERVERS has been identified as a key enabler of the cybercrime ecosystem.
  
Such activity that ZSERVERS was involved in, directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of those affected by the activity.
</UKStatementofReasons>
    <Addresses>
      <Address>
        <AddressLine1>32 Jubileinaia</AddressLine1>
        <AddressLine5>Barnaul</AddressLine5>
        <AddressLine6>Altai Kray</AddressLine6>
        <AddressPostalCode>656902</AddressPostalCode>
        <AddressCountry>Russia</AddressCountry>
      </Address>
    </Addresses>
    <Websites>
      <Website> Zservers.ru </Website>
    </Websites>
  </Designation>

Name on list: ZSERVERS
Programmes / regimes: Cyber (Sanctions) (EU Exit) Regulations 2020
Listed on: 2025-02-11
Last updated: 2025-04-09
Countries: Russia
Addresses: 32 Jubileinaia, Barnaul, Altai Kray, 656902, Russia
Identifiers: OFSI group ID: 16746
Remarks: ZSERVERS has been involved in relevant cyber activity, in that by providing hosting services that support relevant cyber activity it has provided support for the commission, planning or preparation of such activity, has supplied technology and provided technical assistance that could contribute to such activity, and has carried out activities which promoted, enabled or facilitated the commission of relevant cyber activity. ZSERVERS has operated from Barnaul, Russia and has promoted itself as a Bulletproof Hosting (BPH) provider. ZSERVERS has been involved in relevant cyber activity though its role providing infrastructure used in ransomware incidents and reprovisioning infrastructure for customers identified as being involved in malicious cyber activity, including those affiliated with the LockBit ransomware group. ZSERVERS infrastructure was used to host a ransomware-dedicated site connected with the leak of private information stolen from Australian health insurance company Medibank Private Limited. ZSERVERS has been identified as a key enabler of the cybercrime ecosystem. Such activity that ZSERVERS was involved in, directly or indirectly caused, or was intended to cause,

Linked parties & vessels (0)

No linked parties recorded on the lists.

Timeline

2026-09-30Sanctions entry amended

Source

Verified: copied from a structured field of an authoritative source

Source: OFAC Specially Designated Nationals (SDN) List
Retrieved: 2026-09-30
Source date: 2026-09-30

Raw evidence

<sdnEntry>
    <uid>52830</uid>
    <lastName>ZSERVERS</lastName>
    <sdnType>Entity</sdnType>
    <programList>
      <program>CYBER3</program>
    </programList>
    <idList>
      <id>
        <uid>184794</uid>
        <idType>Organization Established Date</idType>
        <idNumber>25 Feb 2011</idNumber>
      </id>
      <id>
        <uid>184862</uid>
        <idType>Organization Type:</idType>
        <idNumber>Other information technology and computer service activities</idNumber>
      </id>
      <id>
        <uid>184793</uid>
        <idType>Website</idType>
        <idNumber>Zservers.ru</idNumber>
      </id>
      <id>
        <uid>184791</uid>
        <idType>Digital Currency Address - XBT</idType>
        <idNumber>1M5N4sJ1NHb4fviLVZA5MZLKhLZqU4CPZz</idNumber>
      </id>
      <id>
        <uid>184792</uid>
        <idType>Digital Currency Address - XBT</idType>
        <idNumber>1Gekw8ACSs37oXcc5XQHvoux3iKoVFtpF4</idNumber>
      </id>
      <id>
        <uid>184871</uid>
        <idType>Digital Currency Address - XBT</idType>
        <idNumber>bc1q4yzd2rjmshm8ucrwy6dzj5rna20j0zlf8hf8vz</idNumber>
      </id>
    </idList>
    <addressList>
      <address>
        <uid>80784</uid>
        <address1>32, Jubileinaia</address1>
        <city>Barnaul</city>
        <stateOrProvince>Altai Krai</stateOrProvince>
        <postalCode>656902</postalCode>
        <country>Russia</country>
      </address>
      <address>
        <uid>80849</uid>
        <country>Netherlands</country>
      </address>
    </addressList>
  </sdnEntry>

OFAC SDN (US) entry amended

About these lists

OFAC Specially Designated Nationals (SDN) List (U.S. Department of the Treasury – OFAC): U.S. blocking sanctions on individuals, entities and vessels. Official page.

UK Sanctions List (UK Foreign, Commonwealth & Development Office): UK financial, trade and shipping sanctions designations, including specified ships. Official page.

Inclusion on a list is an administrative designation, not a criminal conviction. Designations can be challenged and are periodically reviewed; entries marked “no longer listed” have been removed from the respective list. The legal effect of a listing depends on the jurisdiction and the programme concerned.

Compiled automatically from official public sources. Name similarity is not identity; nothing here is a legal determination or allegation of wrongdoing. Verify against the linked official source before relying on any information.