THUGS(red) DarkWeb/Monitor_
  1. Board
  2. Sites
  3. Ransomware
  4. bluewhale

bluewhale

Dead Ransomware Tor v3

capture taken 4h ago
Screenshot of bluewhale

Last 6 captures — hover to preview

what the page says

BlueWhale

Source reported this address as offline or seized at import time.

Security Verification Required Complete the Proof-of-Work challenge to access the platform Difficulty: 5 leading zeros Challenge ID: 0c3be373062ab25a... Prefix: 33ba07c9f002619e Start Challenge
reachability history
The 60 most recent checks.
When Status HTTP Response Bytes Via
5m ago Dead-Connection-Refused - 21,041 ms 0 curl
2h ago Dead-Connection-Refused - 23,601 ms 0 curl
4h ago Alive content moved 200 625 ms 5,547 chrome-stealth
6h ago Alive content moved 200 478 ms 5,547 chrome-stealth
8h ago Alive content moved 200 1 ms 5,547 chrome-stealth
10h ago Alive content moved 200 1 ms 5,547 chrome-stealth
12h ago Alive content moved 200 1 ms 5,547 chrome-stealth
15h ago Dead-Connection-Refused - 14,474 ms 0 curl
17h ago Dead-Connection-Refused - 15,151 ms 0 curl
19h ago Dead-Connection-Refused - 22,021 ms 0 curl
21h ago Dead-Connection-Refused - 13,806 ms 0 curl
23h ago Dead-Connection-Refused - 10,977 ms 0 curl
1d ago Alive content moved 200 1 ms 5,547 chrome-stealth
1d ago Alive content moved 200 1 ms 5,547 chrome-stealth
1d ago Alive content moved 200 482 ms 5,547 chrome-stealth
1d ago Alive content moved 200 1 ms 5,547 chrome-stealth
1d ago Alive content moved 200 378 ms 5,547 chrome-stealth
1d ago Alive content moved 200 2,096 ms 5,547 chrome-stealth
1d ago Dead-Connection-Timeout - 60,000 ms 0 curl
1d ago Dead-Connection-Timeout - 60,001 ms 0 curl
1d ago Dead-Connection-Timeout - 60,000 ms 0 curl
2d ago Alive content moved 200 1 ms 5,547 chrome-stealth
2d ago Alive content moved 200 1 ms 5,547 chrome-stealth
2d ago Alive content moved 200 249 ms 5,547 chrome-stealth
2d ago Alive content moved 200 1 ms 5,547 chrome-stealth
2d ago Alive content moved 200 374 ms 5,547 chrome-stealth
2d ago Alive content moved 200 459 ms 5,547 chrome-stealth
2d ago Alive content moved 200 440 ms 5,547 chrome-stealth
2d ago Dead-Connection-Refused - 12,465 ms 0 curl
2d ago Dead-Connection-Refused - 8,836 ms 0 curl
3d ago Dead-Connection-Refused - 14,374 ms 0 curl
3d ago Dead-Connection-Refused - 6,075 ms 0 curl
3d ago Dead-Connection-Refused - 9,063 ms 0 curl
3d ago Dead-Connection-Refused - 13,064 ms 0 curl
3d ago Dead-Connection-Refused - 12,753 ms 0 curl
3d ago Dead-Connection-Refused - 15,963 ms 0 curl
3d ago Dead-Connection-Refused - 9,040 ms 0 curl
3d ago Dead-Connection-Refused - 7,766 ms 0 curl
3d ago Dead-Connection-Refused - 12,449 ms 0 curl
3d ago Dead-Connection-Timeout - 60,001 ms 0 curl
3d ago Dead-Connection-Timeout - 60,002 ms 0 curl
3d ago Dead-Connection-Refused - 11,033 ms 0 curl
4d ago Dead-Connection-Refused - 11,254 ms 0 curl
4d ago Dead-Connection-Refused - 10,048 ms 0 curl
4d ago Dead-Connection-Refused - 18,843 ms 0 curl
4d ago Dead-Connection-Refused - 10,714 ms 0 curl
4d ago Dead-Connection-Refused - 7,978 ms 0 curl
4d ago Dead-Connection-Refused - 5,165 ms 0 curl
4d ago Dead-Connection-Refused - 13,443 ms 0 curl
4d ago Dead-Connection-Refused - 6,681 ms 0 curl
4d ago Dead-Connection-Refused - 5,113 ms 0 curl
4d ago Dead-Connection-Refused - 8,304 ms 0 curl
4d ago Dead-Connection-Refused - 10,260 ms 0 curl
5d ago Dead-Connection-Refused - 11,616 ms 0 curl
5d ago Dead-Connection-Refused - 10,814 ms 0 curl
5d ago Dead-Connection-Refused - 14,836 ms 0 curl
5d ago Dead-Connection-Refused - 13,338 ms 0 curl
5d ago Dead-Connection-Refused - 9,762 ms 0 curl
5d ago Dead-Connection-Refused - 11,695 ms 0 curl
5d ago Dead-Connection-Timeout - 60,001 ms 0 curl
security headers
Csp
Raw
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' https://cdnjs.cloudflare.com; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'
Directives
Default src
'self'
Script src
'self''unsafe-inline''unsafe-eval'https://cdnjs.cloudflare.com
Style src
'self''unsafe-inline'https://cdnjs.cloudflare.com
Img src
'self'data:https:
Font src
'self'https://cdnjs.cloudflare.com
Connect src
'self'
Frame ancestors
'none'
Base uri
'self'
Form action
'self'
Unsafe inline
yes
Unsafe eval
yes
X frame options
DENY
X content type options
nosniff
Referrer policy
strict-origin-when-cross-origin
Permissions policy
Geolocation
()
Microphone
()
Camera
()
Payment
()
Cross origin
Opener
same-origin
Resource
same-origin
X xss protection
1; mode=block
Cookies
Count
0
Secure
0
Httponly
0
Samesite
0
Score
63
Missing
hstscoep
technology detected
Server
Raw
F5-TrafficShield
Name
F5-TrafficShield
Family
unknown
Js
  • Name
    Font Awesome
    Version
    6.4.0
Cdn
Cloudflare
what blocks us
Detected
no
Confidence
0
Waited ms
0
Http code
200
Via
chrome-stealth
contacts published
  • Total0
crypto addresses
  • Total0
forms on the page
Count
0
Has login
no
Has search
no
Has upload
no
outbound onion links
  • onion_unique not tracked onion_unique
  • onion_total not tracked onion_total
  • clearnet_unique not tracked clearnet_unique
  • internal not tracked internal 5
  • external not tracked external
  • total not tracked total 5
  • truncated not tracked truncated
response headers
HeaderValue
cache-control public, max-age=86400
cf-cache-status DYNAMIC
cf-ray 18db67fc004d02e8-FRA
content-encoding gzip
content-length 1431
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' https://cdnjs.cloudflare.com; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'
content-type text/html; charset=utf-8
cross-origin-opener-policy same-origin
cross-origin-resource-policy same-origin
date Mon, 05 Oct 2026 19:18:13 GMT
expect-ct max-age=86400, enforce
feature-policy geolocation 'none'; microphone 'none'; camera 'none'
last-modified Fri, 07 Aug 2026 14:57:42 GMT
permissions-policy geolocation=(), microphone=(), camera=(), payment=()
referrer-policy strict-origin-when-cross-origin
server F5-TrafficShield
x-cnection close
x-content-type-options nosniff
x-frame-options DENY
x-permitted-cross-domain-policies none
x-wa-info build=1791139608
x-xss-protection 1; mode=block

see the whole category →

Screenshot of sarcoma

sarcoma

rup34myhoxqzm5m2jcstdwxl2wgjvournnyiysghyef6wjdyk3ets6qd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 93.6% up
Screenshot of sarcoma

sarcoma

cgewcqt4x7kb7xgkfu2r3yv5wifzvpx6tojonay3kdgs5tqpjvkd5bqd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 91.8% up