THUGS(red) DarkWeb/Monitor_
  1. Board
  2. Sites
  3. Ransomware
  4. Rhysida

Rhysida

Alive Ransomware Tor v3

capture taken 1h ago
Screenshot of Rhysida

Last 6 captures — hover to preview

what the page says

Rhysida

6 auctions online 276 Companies Token Skaff Group SKAFF is a leader in Lebanon in the field of decorative fabrics. Files: 139,377 Data volume: ~268 GB** Full HR dossiers - ~40 scans of Lebanese national ID cards (both sides + photos), a director's passport, civil-status extracts. Banking data - employee account files at Byblos Bank (named per person), Cedrus Bank corporate card program with banker contacts, account statements. Payroll violations - unpaid-salary analysis file, payroll module source code, staff leave requests. Employees' private lives - family photo archives on the work server.…
reachability history
The 60 most recent checks.
When Status HTTP Response Bytes Via
1h ago Alive 200 385 ms 28,792 chrome-stealth
3h ago Alive 200 525 ms 28,792 chrome-stealth
5h ago Alive 200 488 ms 28,792 chrome-stealth
7h ago Alive 200 130 ms 28,792 chrome-stealth
9h ago Alive 200 242 ms 28,792 chrome-stealth
12h ago Alive content moved 200 141 ms 28,792 chrome-stealth
14h ago Alive 200 592 ms 28,792 chrome-stealth
16h ago Alive 200 144 ms 28,792 chrome-stealth
18h ago Alive 200 124 ms 28,792 chrome-stealth
20h ago Alive 200 471 ms 28,792 chrome-stealth
22h ago Alive 200 202 ms 28,792 chrome-stealth
1d ago Alive 200 486 ms 28,792 chrome-stealth
1d ago Alive 200 208 ms 28,792 chrome-stealth
1d ago Alive 200 249 ms 28,792 chrome-stealth
1d ago Alive 200 680 ms 28,792 chrome-stealth
1d ago Alive 200 114 ms 28,792 chrome-stealth
1d ago Alive 200 235 ms 28,792 chrome-stealth
1d ago Alive 200 140 ms 28,792 chrome-stealth
1d ago Alive 200 2,828 ms 28,792 chrome-stealth
1d ago Alive 200 128 ms 28,792 chrome-stealth
1d ago Alive 200 1,492 ms 28,792 chrome-stealth
2d ago Alive 200 404 ms 28,792 chrome-stealth
2d ago Alive 200 117 ms 28,792 chrome-stealth
2d ago Alive content moved 200 157 ms 28,792 chrome-stealth
2d ago Alive content moved 200 1,386 ms 28,792 chrome-stealth
2d ago Alive content moved 200 3,384 ms 28,792 chrome-stealth
2d ago Alive 200 162 ms 28,792 chrome-stealth
2d ago Alive 200 105 ms 28,792 chrome-stealth
2d ago Alive 200 150 ms 28,792 chrome-stealth
2d ago Alive 200 114 ms 28,792 chrome-stealth
3d ago Alive content moved 200 128 ms 28,792 chrome-stealth
3d ago Alive content moved 200 181 ms 28,792 chrome-stealth
3d ago Alive content moved 200 146 ms 28,792 chrome-stealth
3d ago Alive 200 281 ms 28,792 chrome-stealth
3d ago Alive 200 320 ms 28,792 chrome-stealth
3d ago Alive content moved 200 209 ms 28,792 chrome-stealth
3d ago Alive 200 148 ms 28,792 chrome-stealth
3d ago Alive 200 334 ms 28,792 chrome-stealth
3d ago Alive 200 458 ms 28,792 chrome-stealth
3d ago Alive 200 178 ms 28,792 chrome-stealth
3d ago Alive 200 493 ms 28,792 chrome-stealth
4d ago Alive 200 355 ms 28,792 chrome-stealth
4d ago Alive 200 380 ms 28,792 chrome-stealth
4d ago Alive content moved 200 361 ms 28,792 chrome-stealth
4d ago Alive 200 302 ms 28,792 chrome-stealth
4d ago Alive 200 203 ms 28,792 chrome-stealth
4d ago Alive 200 390 ms 28,792 chrome-stealth
4d ago Alive content moved 200 103 ms 28,792 chrome-stealth
4d ago Alive 200 134 ms 28,792 chrome-stealth
4d ago Alive 200 88 ms 28,792 chrome-stealth
4d ago Alive 200 246 ms 28,792 chrome-stealth
4d ago Alive 200 327 ms 28,792 chrome-stealth
5d ago Alive 200 461 ms 28,792 chrome-stealth
5d ago Alive 200 341 ms 28,792 chrome-stealth
5d ago Alive content moved 200 890 ms 28,792 chrome-stealth
5d ago Alive content moved 200 431 ms 28,792 chrome-stealth
5d ago Alive 200 103 ms 28,792 chrome-stealth
5d ago Alive 200 420 ms 28,792 chrome-stealth
5d ago Alive content moved 200 148 ms 28,792 chrome-stealth
5d ago Alive content moved 200 572 ms 28,792 chrome-stealth
security headers
Cross origin
Cookies
Count
0
Secure
0
Httponly
0
Samesite
0
Score
0
Missing
csphstsx_frame_optionsx_content_typereferrer_policypermissions_policycoopcoepcorp
technology detected
Server
Raw
nginx
Name
nginx
Family
nginx
Js
  • Name
    jQuery
    Version
    3.6.4
  • Name
    Bootstrap
    Version
    5.3.0-alpha2
Protocol
http/1.1
what blocks us
Detected
no
Confidence
0
Waited ms
0
Http code
200
Via
chrome-stealth
contacts published
crypto addresses
  • Total0
forms on the page
Count
8
Kinds
Contact
2
Comment
6
Has login
no
Has search
no
Has upload
no
Forms
  • Kind
    contact
    Method
    get
    Action
    http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/
    Inputs
    5
    Types
    hiddentexttextarea
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    contact
    Method
    get
    Action
    http://rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion/
    Inputs
    3
    Types
    textareaemailtext
    Password
    no
    File
    no
outbound onion links
  • onion_unique not tracked onion_unique 2
  • onion_total not tracked onion_total 3
  • clearnet_unique not tracked clearnet_unique 9
  • internal not tracked internal 1
  • external not tracked external 12
  • total not tracked total 18
  • truncated not tracked truncated
response headers
HeaderValue
connection keep-alive
content-encoding gzip
content-type text/html; charset=UTF-8
date Mon, 05 Oct 2026 22:12:23 GMT
server nginx
transfer-encoding chunked

see the whole category →

Screenshot of abyss-data

abyss-data

ufvi7hpcawesdklmommeeq4iokhq2km4hay3dwh4rirth5xaomle35id.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 64.4% up
Screenshot of ralord

ralord

ralord3htj7v2dkavss2hjzviviwgsf4anfdnihn5qcjl6eb5if3cuqd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 41.8% up
Screenshot of sarcoma

sarcoma

nfh5wuh4gvbai237npdu672xmx2di2lo7pcwu6th2a7kzgue2fnhhdad.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 93.0% up