Sites that ransomware hideout follows