THUGS(red) DarkWeb/Monitor_
  1. Board
  2. Sites
  3. Ransomware
  4. Rhysida

Rhysida

Alive Ransomware Tor v3

capture taken 22m ago
Screenshot of Rhysida

Last 6 captures — hover to preview

what the page says

Rhysida

6 auctions online 276 Companies Token Skaff Group SKAFF is a leader in Lebanon in the field of decorative fabrics. Files: 139,377 Data volume: ~268 GB** Full HR dossiers - ~40 scans of Lebanese national ID cards (both sides + photos), a director's passport, civil-status extracts. Banking data - employee account files at Byblos Bank (named per person), Cedrus Bank corporate card program with banker contacts, account statements. Payroll violations - unpaid-salary analysis file, payroll module source code, staff leave requests. Employees' private lives - family photo archives on the work server.…
reachability history
The 60 most recent checks.
When Status HTTP Response Bytes Via
22m ago Alive 200 144 ms 28,792 chrome-stealth
2h ago Alive 200 720 ms 28,792 chrome-stealth
4h ago Alive 200 682 ms 28,792 chrome-stealth
6h ago Alive 200 636 ms 28,792 chrome-stealth
8h ago Alive 200 185 ms 28,792 chrome-stealth
10h ago Alive content moved 200 248 ms 28,792 chrome-stealth
12h ago Alive 200 292 ms 28,792 chrome-stealth
15h ago Alive 200 591 ms 28,792 chrome-stealth
17h ago Alive 200 680 ms 28,792 chrome-stealth
19h ago Alive 200 373 ms 28,792 chrome-stealth
21h ago Alive 200 266 ms 28,792 chrome-stealth
23h ago Alive 200 629 ms 28,792 chrome-stealth
1d ago Alive 200 970 ms 28,792 chrome-stealth
1d ago Alive 200 359 ms 28,792 chrome-stealth
1d ago Alive 200 252 ms 28,792 chrome-stealth
1d ago Alive 200 876 ms 28,792 chrome-stealth
1d ago Alive 200 595 ms 28,792 chrome-stealth
1d ago Alive 200 697 ms 28,792 chrome-stealth
1d ago Alive 200 873 ms 28,792 chrome-stealth
1d ago Alive 200 664 ms 28,792 chrome-stealth
1d ago Alive 200 939 ms 28,792 chrome-stealth
2d ago Alive 200 2,456 ms 28,792 chrome-stealth
2d ago Alive 200 417 ms 28,792 chrome-stealth
2d ago Alive 200 2,906 ms 28,792 chrome-stealth
2d ago Alive content moved 200 2,222 ms 28,792 chrome-stealth
2d ago Alive content moved 200 232 ms 28,792 chrome-stealth
2d ago Alive 200 470 ms 28,792 chrome-stealth
2d ago Alive 200 709 ms 28,792 chrome-stealth
2d ago Alive 200 220 ms 28,792 chrome-stealth
2d ago Alive 200 261 ms 28,792 chrome-stealth
3d ago Alive 200 492 ms 28,792 chrome-stealth
3d ago Alive content moved 200 205 ms 28,792 chrome-stealth
3d ago Alive content moved 200 396 ms 28,792 chrome-stealth
3d ago Alive content moved 200 387 ms 28,792 chrome-stealth
3d ago Alive 200 483 ms 28,792 chrome-stealth
3d ago Alive 200 429 ms 28,792 chrome-stealth
3d ago Alive content moved 200 322 ms 28,792 chrome-stealth
3d ago Alive 200 372 ms 28,792 chrome-stealth
3d ago Alive 200 809 ms 28,792 chrome-stealth
3d ago Alive 200 474 ms 28,792 chrome-stealth
3d ago Alive 200 921 ms 28,792 chrome-stealth
4d ago Alive 200 308 ms 28,792 chrome-stealth
4d ago Alive 200 624 ms 28,792 chrome-stealth
4d ago Alive 200 622 ms 28,792 chrome-stealth
4d ago Alive content moved 200 458 ms 28,792 chrome-stealth
4d ago Alive 200 516 ms 28,792 chrome-stealth
4d ago Alive 200 238 ms 28,792 chrome-stealth
4d ago Alive 200 636 ms 28,792 chrome-stealth
4d ago Alive content moved 200 323 ms 28,792 chrome-stealth
4d ago Alive 200 1,335 ms 28,792 chrome-stealth
4d ago Alive 200 450 ms 28,792 chrome-stealth
4d ago Alive 200 359 ms 28,792 chrome-stealth
4d ago Alive 200 869 ms 28,792 chrome-stealth
5d ago Alive 200 217 ms 28,792 chrome-stealth
5d ago Alive 200 524 ms 28,792 chrome-stealth
5d ago Alive content moved 200 391 ms 28,792 chrome-stealth
5d ago Alive content moved 200 383 ms 28,792 chrome-stealth
5d ago Alive 200 283 ms 28,792 chrome-stealth
5d ago Alive 200 533 ms 28,792 chrome-stealth
5d ago Alive content moved 200 268 ms 28,792 chrome-stealth
security headers
Cross origin
Cookies
Count
0
Secure
0
Httponly
0
Samesite
0
Score
0
Missing
csphstsx_frame_optionsx_content_typereferrer_policypermissions_policycoopcoepcorp
technology detected
Server
Raw
nginx
Name
nginx
Family
nginx
Js
  • Name
    jQuery
    Version
    3.6.4
  • Name
    Bootstrap
    Version
    5.3.0-alpha2
Protocol
http/1.1
what blocks us
Detected
no
Confidence
0
Waited ms
0
Http code
200
Via
chrome-stealth
contacts published
crypto addresses
  • Total0
forms on the page
Count
8
Kinds
Contact
2
Comment
6
Has login
no
Has search
no
Has upload
no
Forms
  • Kind
    contact
    Method
    get
    Action
    http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
    Inputs
    5
    Types
    hiddentexttextarea
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    comment
    Method
    get
    Action
    http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
    Inputs
    3
    Types
    hiddentextareatext
    Password
    no
    File
    no
  • Kind
    contact
    Method
    get
    Action
    http://rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion/
    Inputs
    3
    Types
    textareaemailtext
    Password
    no
    File
    no
outbound onion links
  • onion_unique not tracked onion_unique 2
  • onion_total not tracked onion_total 3
  • clearnet_unique not tracked clearnet_unique 9
  • internal not tracked internal 1
  • external not tracked external 12
  • total not tracked total 18
  • truncated not tracked truncated
response headers
HeaderValue
connection keep-alive
content-encoding gzip
content-type text/html; charset=UTF-8
date Mon, 05 Oct 2026 23:59:36 GMT
server nginx
transfer-encoding chunked

see the whole category →

Screenshot of ailock

ailock

qvqoau7353xe7wm3z6fzxn33q63ck7cys56wsbx25c22fnxyu4fzhnyd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 63.2% up