THUGS(red) DarkWeb/Monitor_
  1. Board
  2. Sites
  3. Ransomware
  4. cipherwolf

cipherwolf

Dead Ransomware Tor v3

capture taken 3h ago
Screenshot of cipherwolf

Last 6 captures — hover to preview

what the page says

CipherWolf - Ransomware-as-a-Service (RaaS)

Source reported this address as offline or seized at import time.

Home Contact Partners c2 Login CipherWolf Ransomware-as-a-Service (RaaS) Important: Always include your Device ID (from the ransom note) in your first message.
reachability history
The 60 most recent checks.
When Status HTTP Response Bytes Via
1h ago Dead-Connection-Timeout - 60,001 ms 0 curl
3h ago Alive 200 6,508 ms 38,078 chrome-stealth
5h ago Alive 200 10,856 ms 38,078 chrome-stealth
7h ago Dead-Connection-Timeout - 60,002 ms 0 curl
9h ago Dead-Connection-Refused - 27,330 ms 0 curl
11h ago Alive 200 8,239 ms 38,078 chrome-stealth
14h ago Alive 200 644 ms 38,078 chrome-stealth
16h ago Alive 200 540 ms 38,078 chrome-stealth
18h ago Alive 200 8,207 ms 38,078 chrome-stealth
20h ago Alive 200 5,836 ms 38,078 chrome-stealth
22h ago Alive 200 896 ms 38,078 chrome-stealth
1d ago Dead-Connection-Timeout - 60,001 ms 0 curl
1d ago Alive 200 1,715 ms 38,078 chrome-stealth
1d ago Alive 200 714 ms 38,078 chrome-stealth
1d ago Alive 200 3,194 ms 38,078 chrome-stealth
1d ago Alive 200 1,580 ms 38,078 chrome-stealth
1d ago Alive 200 320 ms 38,078 chrome-stealth
1d ago Dead-Connection-Timeout - 60,000 ms 0 curl
1d ago Alive 200 7,310 ms 38,078 chrome-stealth
1d ago Alive 200 216 ms 38,078 chrome-stealth
1d ago Alive 200 3,070 ms 38,078 chrome-stealth
2d ago Alive 200 606 ms 38,078 chrome-stealth
2d ago Alive 200 1,812 ms 38,078 chrome-stealth
2d ago Dead-Connection-Timeout - 60,002 ms 0 curl
2d ago Dead-Connection-Timeout - 60,002 ms 0 curl
2d ago Dead-Connection-Timeout - 60,001 ms 0 curl
2d ago Dead-Connection-Timeout - 60,002 ms 0 curl
2d ago Alive 200 3,552 ms 38,078 chrome-stealth
2d ago Alive 200 11,407 ms 38,078 chrome-stealth
2d ago Alive 200 4,077 ms 38,078 chrome-stealth
3d ago Dead-Connection-Timeout content moved - 32,026 ms 184,846 chrome-stealth
3d ago Alive 200 2,330 ms 38,078 chrome-stealth
3d ago Alive 200 5,182 ms 38,078 chrome-stealth
3d ago Dead-Connection-Timeout - 60,001 ms 0 curl
3d ago Dead-Connection-Timeout - 60,001 ms 0 curl
3d ago Alive 200 423 ms 38,078 chrome-stealth
3d ago Dead - 37,077 ms 0 curl
3d ago Dead-Connection-Timeout - 60,001 ms 0 curl
3d ago Dead-Connection-Refused - 12,935 ms 0 curl
3d ago Dead-Connection-Refused - 30,615 ms 0 curl
3d ago Dead-Connection-Timeout - 60,000 ms 0 curl
4d ago Alive 200 444 ms 38,078 chrome-stealth
4d ago Alive 200 7,868 ms 38,078 chrome-stealth
4d ago Alive 200 4,594 ms 38,078 chrome-stealth
4d ago Dead-Connection-Timeout - 60,001 ms 0 curl
4d ago Alive 200 3,808 ms 38,078 chrome-stealth
4d ago Dead-Connection-Timeout - 60,001 ms 0 curl
4d ago Alive 200 4,161 ms 38,078 chrome-stealth
4d ago Alive 200 7,749 ms 38,078 chrome-stealth
4d ago Alive 200 8,957 ms 38,078 chrome-stealth
4d ago Alive 200 200 ms 38,078 chrome-stealth
4d ago Dead-Connection-Timeout - 60,001 ms 0 curl
5d ago Dead-Connection-Timeout - 60,001 ms 0 curl
5d ago Alive 200 719 ms 38,078 chrome-stealth
5d ago Dead-Connection-Timeout - 60,001 ms 0 curl
5d ago Alive 200 800 ms 38,078 chrome-stealth
5d ago Alive 200 660 ms 38,078 chrome-stealth
5d ago Alive 200 8,181 ms 38,078 chrome-stealth
5d ago Alive 200 3,972 ms 38,078 chrome-stealth
5d ago Alive 200 282 ms 38,078 chrome-stealth
security headers
Cross origin
Cookies
Count
0
Secure
0
Httponly
0
Samesite
0
Score
0
Missing
csphstsx_frame_optionsx_content_typereferrer_policypermissions_policycoopcoepcorp
technology detected
Server
Raw
nginx
Name
nginx
Family
nginx
Js
  • Name
    Font Awesome
    Version
    6.4.0
Protocol
http/1.1
what blocks us
Detected
no
Confidence
0
Waited ms
0
Http code
200
Via
chrome-stealth
contacts published
  • Emails[email protected]
  • Tox0FDCE2F2E213A62A46FB9DBE703D631444CAC1A2FF39FB44FB5A19CAB121F36AB5435EBEAB48
  • Session059240a35686e9627829cd46989cdf300b2d6112f9ecec0c9777d41e09e97e6b29
  • Telegram@CipherWolfRaaS
  • Total4
crypto addresses
  • Total1
  • Standard494YArKwxgf1nygCmwXRDcCaZrbmjX31tXwzvXW7KxCyaZcJx5xPtkb2CVbQWyUsFacLpGBwk1t3jQVsDMPf1fi21dA7SCV
forms on the page
Count
0
Has login
no
Has search
no
Has upload
no
outbound onion links
  • onion_unique not tracked onion_unique
  • onion_total not tracked onion_total
  • clearnet_unique not tracked clearnet_unique 3
  • internal not tracked internal 2
  • external not tracked external 3
  • total not tracked total 8
  • truncated not tracked truncated
response headers
HeaderValue
connection keep-alive
content-encoding gzip
content-type text/html; charset=UTF-8
date Mon, 05 Oct 2026 20:26:09 GMT
server nginx
transfer-encoding chunked
vary Accept-Encoding

see the whole category →

Screenshot of sarcoma

sarcoma

cgewcqt4x7kb7xgkfu2r3yv5wifzvpx6tojonay3kdgs5tqpjvkd5bqd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 91.8% up
Screenshot of sarcoma

sarcoma

dj3t7qdgyopmjnvjvni7kdfne36zlq4uic5ajqrh45stquvxcwtdc3qd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 93.6% up
Screenshot of sarcoma

sarcoma

ob4kfkvgqxbiddrhzlq2yhlyfpdmnro4yptt24drsjvcekczjjaf5myd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 93.0% up