THUGS(red) DarkWeb/Monitor_
  1. Board
  2. Sites
  3. Ransomware
  4. direwolf

direwolf

Dead Ransomware Tor v3

capture
Blocked: a challenge page was served instead of the siteCHALLENGE PAGE

The only capture we hold is a challenge page, not the service. It is kept for evidence but is not shown here as if it were the site. View the raw capture.

Last 6 captures — hover to preview

what the page says

DireWolf Negotiation System - Login

🌙 Dark Negotiation System Login Username Password Login OR USE AN ACCESS TOKEN Access token Verification code Click the image for a new code. Enter with token Should your account credentials become inaccessible, please contact us via qTox by adding the qTox ID listed on our website.
reachability history
The 60 most recent checks.
When Status HTTP Response Bytes Via
51m ago Dead-Connection-Timeout - 60,002 ms 0 curl
2h ago Alive 200 713 ms 22,304 chrome-stealth
5h ago Alive 200 842 ms 22,304 chrome-stealth
7h ago Alive 200 719 ms 22,304 chrome-stealth
9h ago Alive 200 304 ms 22,304 chrome-stealth
11h ago Alive 200 753 ms 22,304 chrome-stealth
13h ago Alive 200 364 ms 22,304 chrome-stealth
15h ago Alive 200 507 ms 22,304 chrome-stealth
17h ago Alive 200 547 ms 22,304 chrome-stealth
19h ago Alive 200 373 ms 22,304 chrome-stealth
21h ago Alive 200 675 ms 22,304 chrome-stealth
23h ago Dead-Connection-Timeout - 60,002 ms 0 curl
1d ago Alive 200 580 ms 22,304 chrome-stealth
1d ago Alive 200 378 ms 22,304 chrome-stealth
1d ago Alive 200 667 ms 22,304 chrome-stealth
1d ago Alive 200 384 ms 22,304 chrome-stealth
1d ago Alive 200 507 ms 22,304 chrome-stealth
1d ago Alive 200 724 ms 22,304 chrome-stealth
1d ago Alive 200 1,073 ms 22,304 chrome-stealth
1d ago Alive 200 524 ms 22,304 chrome-stealth
1d ago Dead-Connection-Timeout - 60,001 ms 0 curl
2d ago Alive 200 387 ms 22,304 chrome-stealth
2d ago Alive 200 662 ms 22,304 chrome-stealth
2d ago Dead-Connection-Timeout - 60,002 ms 0 curl
2d ago Alive 200 3,418 ms 22,304 chrome-stealth
2d ago Alive 200 578 ms 22,304 chrome-stealth
2d ago Alive 200 2,620 ms 22,304 chrome-stealth
2d ago Alive 200 1,245 ms 22,304 chrome-stealth
2d ago Alive 200 738 ms 22,304 chrome-stealth
2d ago Alive 200 336 ms 22,304 chrome-stealth
3d ago Alive 200 411 ms 22,304 chrome-stealth
3d ago Alive 200 304 ms 22,304 chrome-stealth
3d ago Alive 200 1,307 ms 22,304 chrome-stealth
3d ago Alive 200 690 ms 22,304 chrome-stealth
3d ago Alive 200 537 ms 22,304 chrome-stealth
3d ago Alive 200 801 ms 22,304 chrome-stealth
3d ago Alive 200 766 ms 22,304 chrome-stealth
3d ago Alive 200 745 ms 22,304 chrome-stealth
3d ago Alive 200 281 ms 22,304 chrome-stealth
3d ago Alive 200 701 ms 22,304 chrome-stealth
3d ago Alive 200 671 ms 22,304 chrome-stealth
4d ago Alive 200 270 ms 22,304 chrome-stealth
4d ago Alive 200 413 ms 22,304 chrome-stealth
4d ago Alive 200 240 ms 22,304 chrome-stealth
4d ago Alive 200 269 ms 22,304 chrome-stealth
4d ago Alive 200 537 ms 22,304 chrome-stealth
4d ago Alive 200 465 ms 22,304 chrome-stealth
4d ago Alive 200 250 ms 22,304 chrome-stealth
4d ago Alive 200 766 ms 22,304 chrome-stealth
4d ago Alive 200 517 ms 22,304 chrome-stealth
4d ago Alive 200 704 ms 22,304 chrome-stealth
4d ago Alive 200 980 ms 22,304 chrome-stealth
5d ago Alive 200 1,069 ms 22,304 chrome-stealth
5d ago Alive 200 739 ms 22,304 chrome-stealth
5d ago Alive 200 976 ms 22,304 chrome-stealth
5d ago Alive 200 227 ms 22,304 chrome-stealth
5d ago Alive 200 385 ms 22,304 chrome-stealth
5d ago Alive 200 632 ms 22,304 chrome-stealth
5d ago Alive 200 331 ms 22,304 chrome-stealth
5d ago Alive 200 367 ms 22,304 chrome-stealth
security headers
Csp
Raw
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' ws: wss:;
Directives
Default src
'self'
Script src
'self''unsafe-inline'
Style src
'self''unsafe-inline'
Img src
'self'data:
Connect src
'self'ws:wss:
Unsafe inline
yes
Unsafe eval
no
X frame options
DENY
X content type options
nosniff
Referrer policy
strict-origin-when-cross-origin
Cross origin
X xss protection
1; mode=block
Cookies
Count
0
Secure
0
Httponly
0
Samesite
0
Score
52
Missing
hstspermissions_policycoopcoepcorp
technology detected
Server
Family
unknown
Protocol
http/1.1
what blocks us
Detected
yes
Kind
js-required
Vendor
Origin
Label
JavaScript required
Confidence
40
Signals
"javascript is required" noticenoscript block
Self clearing
yes
Cleared
no
Waited ms
8017
Http code
200
Via
chrome-stealth
contacts published
  • Total0
crypto addresses
  • Total0
forms on the page
Count
1
Kinds
Login
1
Has login
yes
Has search
no
Has upload
no
Forms
  • Kind
    login
    Method
    get
    Action
    http://direwolf66s5zealav7azcyqeipiswecvvnapyuby3dek473kyqfucad.onion/
    Inputs
    3
    Types
    textpasswordsubmit
    Password
    yes
    File
    no
outbound onion links
  • onion_unique not tracked onion_unique
  • onion_total not tracked onion_total
  • clearnet_unique not tracked clearnet_unique
  • internal not tracked internal
  • external not tracked external
  • total not tracked total
  • truncated not tracked truncated
response headers
HeaderValue
content-encoding gzip
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' ws: wss:;
content-type text/html; charset=utf-8
date Mon, 05 Oct 2026 22:11:28 GMT
referrer-policy strict-origin-when-cross-origin
transfer-encoding chunked
vary Accept-Encoding
x-content-type-options nosniff
x-frame-options DENY
x-xss-protection 1; mode=block

see the whole category →

Screenshot of interlock

interlock

f53mekzwvscxejfqxtikrzcmqnd3bt5i4d7odvh62sir7eqhdwwjntad.onion

Web based File Manager in PHP, Manage your files efficiently and easily with Tiny File Manager

Alive Ransomware 75.4% up
Screenshot of nova

nova

novavagygnhqyf7a5tgbuvmujve5a2jzgbrq2n4dvetkhvr2zjg27cad.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 41.5% up