2025-11-17T14:54:24-06:00 2024-12-31 420714325 RSM US LLP 920 5TH AVENUE SUITE 2800 SEATTLE WA 98104 990 2024-01-01 262267933 THE SHADOWSERVER FOUNDATION INC SHAD 5109563740 4695 CHABOT DR SUITE 200 PLEASANTON CA 94588 PIOTR KIJEWSKI CEO 5109563740 2025-11-17 1 1 SUE ROBISON P00560072 2062814444 2025-11-17 2024 2025-03-06 01:10:19Z PIOTR KIJEWSKI 4695 CHABOT DR SUITE 200 PLEASANTON CA 94588 4124872 0 X HTTPS://WWW.SHADOWSERVER.ORG X 2007 NJ SHADOWSERVER'S MISSION IS TO MAKE THE INTERNET MORE SECURE BY BRINGING TO LIGHT VULNERABILITIES, MALICIOUS ACTIVITY AND EMERGING THREATS. SINCE 2004, SHADOWSERVER HAS BEEN INVESTIGATING MALICIOUS INTERNET ACTIVITY, COLLECTING MALWARE WITH ITS RELATED ANALYSIS AND META DATA, WORKING WITH LAW ENFORCEMENT IN VARIOUS CAPACITIES, AND SHARING INFECTION AND MALICIOUS DATA WITH APPROPRIATE NETWORK OWNERS. SHADOWSERVER ALSO PROVIDES EDUCATIONAL PRESENTATIONS WORLDWIDE WHILE ENCOURAGING THE OPEN SHARING OF DATA WITHIN THE SECURITY INDUSTRY AND WITH VENDOR AND GOVERNMENT ORGANIZATIONS. SHADOWSERVER HAS EMERGED AS ONE OF THE WORLD'S LEADING RESOURCES FOR INTERNET SECURITY REPORTING AND MALICIOUS ACTIVITY INVESTIGATION AND MAINTAINS A GLOBAL INFRASTRUCTURE SPANNING 90 COUNTRIES. THE ORGANIZATION IS FUNDED FROM SPONSORSHIPS, GRANTS AND CHARITABLE DONATIONS. 4 2 6 2 0 0 3070311 4012915 589887 111900 461 57 0 0 3660659 4124872 0 0 0 0 1357441 1424711 0 0 54837 1978353 3154073 3335794 4578784 324865 -453912 2206216 2299846 2062723 2731706 143493 -431860 X SEE SCHEDULE OSHADOWSERVER'S MISSION IS TO MAKE THE INTERNET MORE SECURE BY BRINGING TO LIGHT VULNERABILITIES, MALICIOUS ACTIVITY AND EMERGING THREATS. SINCE 2004, SHADOWSERVER HAS BEEN INVESTIGATING MALICIOUS INTERNET ACTIVITY, COLLECTING MALWARE WITH ITS RELATED ANALYSIS AND META DATA, WORKING WITH LAW ENFORCEMENT IN VARIOUS CAPACITIES, AND SHARING INFECTION AND MALICIOUS DATA WITH APPROPRIATE NETWORK OWNERS. SHADOWSERVER ALSO PROVIDES EDUCATIONAL PRESENTATIONS WORLDWIDE WHILE ENCOURAGING THE OPEN SHARING OF DATA WITHIN THE SECURITY INDUSTRY AND WITH VENDOR AND GOVERNMENT ORGANIZATIONS. SHADOWSERVER HAS EMERGED AS ONE OF THE WORLD'S LEADING RESOURCES FOR INTERNET SECURITY REPORTING AND MALICIOUS ACTIVITY INVESTIGATION AND MAINTAINS A GLOBAL INFRASTRUCTURE SPANNING 90 COUNTRIES. THE ORGANIZATION IS FUNDED FROM SPONSORSHIPS, GRANTS AND CHARITABLE DONATIONS. 0 0 2981032 11900 SPECIAL PROJECTS: (1) LAW ENFORCEMENT SPECIAL PROJECTS TEAM - A TEAM OF PEOPLE AND THEIR EFFORTS TO PURSUE AND TAKE DOWN CYBER-CRIMINAL ACTIVITIES AND INFRASTRUCTURES. (2) REGISTRAR OF LAST RESORT, A SPECIAL PURPOSE DNS REGISTRAR FOR REGISTERING AND MANAGING MALICIOUS DOMAIN NAMES USED FOR MALWARE/BOTNET COMMAND AND CONTROL, PARTICULARLY HIGH-VOLUME DOMAIN GENERATION ALGORITHMS (DGAS). (3) THE SHADOWSERVER ALLIANCE. (4) THE SHADOWSERVER PUBLIC DASHBOARD. (5) OTHER 270930 BACKEND MANAGEMENT SYSTEM: PROJECTS FOR MANAGEMENT, UPGRADES, AND EXPANSION OF THE SHADOWSERVER DATA CENTER AND RELATED EQUIPMENT TO INCLUDE DEVELOPMENT OF SUPPORTING TECHNOLOGIES FOR NEW AND EXISTING MISSIONS AND MAINTENANCE OF EXISTING DATA STORAGE AND QUERY SYSTEMS, AND CREATION OF DAILY REPORTS (THREAT INTELLIGENCE FEEDS) TO THE INTERNET DEFENDER COMMUNITY. INCLUDES MAINTENANCE OF THE PUBLIC SHADOWSERVER DASHBOARD. 143517 100000 CORE DATA COLLECTION PROJECTS: (1) SINKHOLING, A PROJECT TO REDIRECT MALICIOUS TRAFFIC BY TAKING OVER MALICIOUS DOMAINS IN ORDER TO SEIZE OR DISRUPT BOTNETS AND WARN VICTIMS OF CYBERCRIME; (2) HONEYPOT/HONEYNET, A PROJECT TO DEVELOP AND MAINTAIN A WORLDWIDE SET OF EMULATED VULNERABLE SYSTEMS TO CAPTURE AND ANALYZE MALICIOUS INTERNET TRAFFIC; (3) MALWARE REPOSITORY, A PROJECT TO COLLECT MALWARE AT SCALE AND ANALYZE THE MALWARE, WHICH ALSO INCLUDES THE EXECUTION OF THE MALWARE IN SANDBOXES. 3395479 1 1 0 0 0 0 0 0 0 0 1 0 0 1 1 1 1 0 0 1 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 1 0 0 0 0 0 1 0 0 0 1 4 0 1 6 1 0 0 0 0 0 0 0 0 0 0 0 0 X 4 2 0 0 0 0 0 0 0 1 0 0 0 1 1 1 0 0 0 0 0 0 CA NJ NY X PIOTR KIJEWSKI 5109563740 4695 CHABOT DR SUITE 200 PLEASANTON CA 94588 PIOTR KIJEWSKI TRUSTEE, CEO 20.00 40.00 X X 0 188303 0 MICHAEL JOHNSON TRUSTEE, CFO 5.00 0.00 X 0 0 0 NIKLAS SCHIFFLER TRUSTEE 5.00 0.00 X 0 0 0 DAVID WATSON TRUSTEE 5.00 35.00 X 0 0 0 JASON RHOADS SENIOR ARCHITECT 40.00 0.00 X 323625 0 61124 DUNCAN TAYLOR SENIOR SYSTEM ADMINISTRATOR 40.00 0.00 X 176838 0 37341 DAVID DE COSTER SENIOR SECURITY ENGINEER 40.00 0.00 X 169432 0 56184 DIMITRI NGUYEN SYSTEM ADMINISTRATOR 40.00 0.00 X 120593 0 23336 CHARLES A EBERLE IV ALLIANCE DIRECTOR 40.00 0.00 X 210458 0 81633 1000946 188303 259618 5 0 1 0 HONEYNET SERVICES LTD TRIUNE CT MONKS CROSS DR HUNTINGTON UK YO32 9GZ LEAD OF ALL SPECIAL PROJECTS 424984 RSM US LLP 331 W 3RD ST STE 200 DAVENPORT IL 52801 ACCOUNTING 139333 MATT TARBIT 21A HIGHBURY TERRACE LEEDS UK LS64ET SUPPORT OUTPUT CATTLE PROJECTS 130957 BARRY GREENE 11692 WESTSHORE COURT CUPERTINO CA 95014 FCDO GRANT ACTIVITY LIAISON 104532 4 4012915 4012915 CORE DATA COLLECTION P 541511 100000 100000 SPECIAL PROJECTS 541511 11900 11900 111900 57 57 4124872 111900 0 57 X 384749 248350 136399 732875 473058 259817 42659 27535 15124 197082 127213 69869 67346 43471 23875 8485 8485 167426 167426 1178687 1134203 44431 53 22506 6735 12991 2780 528916 378323 150593 667040 478270 188223 547 147281 87145 8679 51457 36902 17728 19174 19903 19903 SHARED OPERATING 373448 373448 TAXES - OTHER 3479 3479 4578784 3395479 1128468 54837 434140 793777 146887 931817 91281 113749 2952975 2931646 58231 21329 1475677 439174 2206216 2299846 629532 1298221 0 391600 269580 549350 1163611 492535 2062723 2731706 X 143493 -431860 143493 -431860 2206216 2299846 X -453912 -121441 X 0 1 X 1 0 X 2850645 1955059 1454750 3070311 4012915 13343680 568175 627148 1046069 589887 111900 2943179 3418820 2582207 2500819 3660198 4124815 16286859 0 435888 135020 169926 183393 122367 1046594 435888 135020 169926 183393 122367 1046594 15240265 112 63 94 461 57 787 112 63 94 461 57 787 2782 2782 3418932 2582270 2503695 3660659 4124872 16290428 0.93550 0.89570 0.00000 0.00010 X RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED RESTRICTED 62472 60390 2082 2796676 2778780 17896 93827 92476 1351 21329 SECURITY DEPOSIT 71390 RIGHT-OF-USE ASSET - OPERATING LEASE 367784 439174 LEASE LIABILITY 492535 492535 X 4124872 0 4124872 0 4124872 4700225 121441 121441 4578784 0 4578784 PART X, LINE 2: THE FOUNDATION IS EXEMPT FROM PAYMENT OF TAXES ON INCOME OTHER THAN NET UNRELATED BUSINESS INCOME UNDER IRC SECTION 501(C)(3). FOR THE YEARS ENDED DECEMBER 31, 2024 AND 2023, THERE WAS NO UNRELATED BUSINESS INCOME AND, ACCORDINGLY, NO FEDERAL OR STATE INCOME TAXES HAVE BEEN RECORDED. MANAGEMENT HAS EVALUATED THE FOUNDATION'S TAX POSITIONS AND CONCLUDED THAT THE FOUNDATION'S FINANCIAL STATEMENTS DO NOT INCLUDE ANY UNCERTAIN TAX POSITIONS. PART XII, LINE 2D - OTHER ADJUSTMENTS: EXCHANGE RATE LOSS 121,441. EUROPE (INCLUDING ICELAND & GREENLAND) 0 8 PROGRAM SERVICES SOFTWARE DEVELOPMENT, SPECIAL PROJECTS MANAGEMENT, LIAISON SERVICES 1284706 SUB-SAHARAN AFRICA 0 1 PROGRAM SERVICES SOFTWARE DEVELOPMENT, SPECIAL PROJECTS MANAGEMENT, LIAISON SERVICES 28153 0 9 0 0 0 9 1312859 0 1312859 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 JASON RHOADS SENIOR ARCHITECT 323625 0 0 0 0 0 19800 0 41324 0 384749 0 0 0 CHARLES A EBERLE IV ALLIANCE DIRECTOR 210458 0 0 0 0 0 12269 0 69364 0 292091 0 0 0 DAVID DE COSTER SENIOR SECURITY ENGINEER 169432 0 0 0 0 0 10500 0 45684 0 225616 0 0 0 DUNCAN TAYLOR SENIOR SYSTEM ADMINISTRATOR 176838 0 0 0 0 0 10800 0 26541 0 214179 0 0 0 PIOTR KIJEWSKI TRUSTEE, CEO 0 188303 0 0 0 0 0 0 0 0 0 188303 0 0 PART I, LINE 7 THE ORGANIZATION DOES NOT PROVIDE ANY NONFIXED PAYMENTS. HOWEVER, DAVID WATSON HAS A SET SERVICE COST WITH HONEYNET SERVICES LTD FOR HIS CONSULTANCY SERVICES. DAVID WATSON TRUSTEE 424984 PAYMENT FOR SERVICES TO HONEYNET SERVICES LTD. MR. WATSON HAS MORE THAN 35% OWNERSHIP IN HONEYNET SERVICES LTD. 1 FORM 990, PART VI, SECTION A, LINE 8B THE ORGANIZATION HAS AN OPERATIONS COMMITTEE WHICH DOES NOT HAVE OFFICIAL PRACTICES OR POLICIES RELATED TO THE DOCUMENTATION OF THEIR MEETINGS DURING THE YEAR. FORM 990, PART VI, SECTION B, LINE 11B THE CEO COMPLETES THE INITIAL REVIEW. THE FINAL COPY OF THE FULL 990 IS THEN REVIEWED BY THE BOARD PRIOR TO FILING. FORM 990, PART VI, SECTION C, LINE 19 THE ORGANIZATION MAKES ITS FINANCIAL STATEMENTS AVAILABLE UPON REQUEST FOR THE SAME PERIOD OF DISCLOSURE AS SET FORTH IN SECTION 6104(D). FORM 990, PART IX, LINE 11G PAYROLL PROCESSING: PROGRAM SERVICE EXPENSES 4,553. MANAGEMENT AND GENERAL EXPENSES 178. FUNDRAISING EXPENSES 0. TOTAL EXPENSES 4,731. CONTRACT SERVICES: PROGRAM SERVICE EXPENSES 1,129,650. MANAGEMENT AND GENERAL EXPENSES 44,253. FUNDRAISING EXPENSES 53. TOTAL EXPENSES 1,173,956. FORM 990, PART XI, LINE 9: EXCHANGE RATE LOSS -121,441. STICHTING THE SHADOWSERVER FOUNDATION EUROPE LOCATELLIKADE 1 AMSTERDAM NL 1076 AZ TO INVESTIGATE MALWARE NL 501(C)(3) LINE 7 THE SHADOWSERVER FOUNDATION INC 1 STICHTING REGISTRAR OF LAST RESORT FOUNDATION LOCATELLIKADE 1 AMSTERDAM NL 1076 AZ TO BLOCK MALICIOUS DOMAINS NL 501(C)(3) LINE 7 THE SHADOWSERVER FOUNDATION INC 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 1 STICHTING THE SHADOWSERVER FOUNDATION EUROPE B 391600 COST STICHTING REGISTRAR OF LAST RESORT FOUNDATION S 141747 COST