THUGS(red) DarkWeb/Monitor_

direwolf

Alive Ransomware Tor v3

capture
Blocked: a challenge page was served instead of the siteCHALLENGE PAGE

The only capture we hold is a challenge page, not the service. It is kept for evidence but is not shown here as if it were the site. View the raw capture.

what the page says

DireWolf Negotiation System - Login

🌙 Dark Negotiation System Login Username Password Login OR USE AN ACCESS TOKEN Access token Verification code Click the image for a new code. Enter with token Should your account credentials become inaccessible, please contact us via qTox by adding the qTox ID listed on our website.
reachability history
The 60 most recent checks.
When Status HTTP Response Bytes Via
1m ago Alive 200 658 ms 22,304 chrome-stealth
1h ago Alive 200 548 ms 22,304 chrome-stealth
2h ago Alive 200 491 ms 22,304 chrome-stealth
4h ago Alive 200 394 ms 22,304 chrome-stealth
5h ago Alive 200 413 ms 22,304 chrome-stealth
6h ago Alive 200 953 ms 22,304 chrome-stealth
7h ago Alive 200 399 ms 22,304 chrome-stealth
9h ago Alive 200 502 ms 22,304 chrome-stealth
10h ago Alive 200 461 ms 22,304 chrome-stealth
12h ago Alive 200 498 ms 22,304 chrome-stealth
13h ago Alive 200 713 ms 22,304 chrome-stealth
16h ago Alive 200 635 ms 22,304 chrome-stealth
19h ago Alive 200 901 ms 22,304 chrome-stealth
22h ago Alive 200 698 ms 22,304 chrome-stealth
1d ago Dead-Connection-Timeout - 60,000 ms 0 curl
1d ago Alive 200 1,266 ms 22,304 chrome-stealth
1d ago Alive 200 1,034 ms 22,304 chrome-stealth
1d ago Alive 200 869 ms 22,304 chrome-stealth
1d ago Alive 200 1,281 ms 22,304 chrome-stealth
1d ago Alive 200 708 ms 22,304 chrome-stealth
1d ago Alive 200 544 ms 22,304 chrome-stealth
1d ago Alive 200 1,652 ms 22,304 chrome-stealth
1d ago Alive 200 753 ms 22,304 chrome-stealth
1d ago Alive 200 407 ms 22,304 chrome-stealth
1d ago Alive 200 1,185 ms 22,304 chrome-stealth
2d ago Alive 200 1,077 ms 22,304 chrome-stealth
2d ago Alive 200 1,154 ms 22,304 chrome-stealth
2d ago Alive 200 592 ms 22,304 chrome-stealth
2d ago Alive 200 1,021 ms 22,304 chrome-stealth
2d ago Alive 200 507 ms 22,304 chrome-stealth
2d ago Alive 200 905 ms 22,304 chrome-stealth
2d ago Alive 200 1,386 ms 22,304 chrome-stealth
3d ago Alive 200 1,272 ms 22,304 chrome-stealth
3d ago Alive 200 1,301 ms 22,304 chrome-stealth
3d ago Alive 200 864 ms 22,304 chrome-stealth
3d ago Alive 200 417 ms 22,304 chrome-stealth
3d ago Alive 200 3,178 ms 22,304 chrome-stealth
3d ago Alive 200 1,290 ms 22,304 chrome-stealth
3d ago Alive 200 853 ms 22,304 chrome-stealth
3d ago Alive 200 836 ms 22,304 chrome-stealth
3d ago Alive 200 822 ms 22,304 chrome-stealth
3d ago Alive 200 2,017 ms 22,304 chrome-stealth
3d ago Alive 200 990 ms 22,304 chrome-stealth
4d ago Alive 200 743 ms 22,304 chrome-stealth
4d ago Dead-Connection-Timeout - 60,001 ms 0 curl
4d ago Dead-Connection-Timeout - 60,002 ms 0 curl
4d ago Alive 200 869 ms 22,304 chrome-stealth
4d ago Alive 200 510 ms 22,304 chrome-stealth
4d ago Alive 200 880 ms 22,304 chrome-stealth
4d ago Alive 200 1,014 ms 22,304 chrome-stealth
4d ago Alive 200 599 ms 22,304 chrome-stealth
5d ago Alive 200 918 ms 22,304 chrome-stealth
5d ago Alive 200 1,047 ms 22,304 chrome-stealth
5d ago Alive 200 628 ms 22,304 chrome-stealth
5d ago Alive 200 770 ms 22,304 chrome-stealth
5d ago Alive 200 430 ms 22,304 chrome-stealth
5d ago Alive 200 495 ms 22,304 chrome-stealth
5d ago Alive 200 627 ms 22,304 chrome-stealth
5d ago Alive 200 640 ms 22,304 chrome-stealth
5d ago Alive 200 805 ms 22,304 chrome-stealth
security headers
Csp
Raw
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' ws: wss:;
Directives
Default src
'self'
Script src
'self''unsafe-inline'
Style src
'self''unsafe-inline'
Img src
'self'data:
Connect src
'self'ws:wss:
Unsafe inline
yes
Unsafe eval
no
X frame options
DENY
X content type options
nosniff
Referrer policy
strict-origin-when-cross-origin
Cross origin
X xss protection
1; mode=block
Cookies
Count
0
Secure
0
Httponly
0
Samesite
0
Score
52
Missing
hstspermissions_policycoopcoepcorp
technology detected
Server
Family
unknown
Protocol
http/1.1
what blocks us
Detected
yes
Kind
js-required
Vendor
Origin
Label
JavaScript required
Confidence
40
Signals
"javascript is required" noticenoscript block
Self clearing
yes
Cleared
no
Waited ms
8194
Http code
200
Via
chrome-stealth
contacts published
  • Total0
crypto addresses
  • Total0
forms on the page
Count
1
Kinds
Login
1
Has login
yes
Has search
no
Has upload
no
Forms
  • Kind
    login
    Method
    get
    Action
    http://direwolf66s5zealav7azcyqeipiswecvvnapyuby3dek473kyqfucad.onion/
    Inputs
    3
    Types
    textpasswordsubmit
    Password
    yes
    File
    no
outbound onion links
  • onion_unique not tracked onion_unique
  • onion_total not tracked onion_total
  • clearnet_unique not tracked clearnet_unique
  • internal not tracked internal
  • external not tracked external
  • total not tracked total
  • truncated not tracked truncated
response headers
HeaderValue
content-encoding gzip
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' ws: wss:;
content-type text/html; charset=utf-8
date Thu, 15 Oct 2026 14:26:26 GMT
referrer-policy strict-origin-when-cross-origin
transfer-encoding chunked
vary Accept-Encoding
x-content-type-options nosniff
x-frame-options DENY
x-xss-protection 1; mode=block