THUGS(red) DarkWeb/Monitor_
  1. Board
  2. Sites
  3. Ransomware
  4. anubis

anubis

Alive Ransomware Tor v3

capture
Blocked: a challenge page was served instead of the siteCHALLENGE PAGE

The only capture we hold is a challenge page, not the service. It is kept for evidence but is not shown here as if it were the site. View the raw capture.

Last 6 captures — hover to preview

what the page says

Captcha

Source reported this address as offline or seized at import time.

Beyond this line, Anubis guards the secrets of others. Entry only for those who know their price. Welcome to the Anubis blog ! Click on the positions of the letters: RNCJU Send
reachability history
The 60 most recent checks.
When Status HTTP Response Bytes Via
8m ago Alive content moved 200 426 ms 5,746 chrome-stealth
2h ago Alive content moved 200 646 ms 5,746 chrome-stealth
4h ago Alive content moved 200 739 ms 5,746 chrome-stealth
6h ago Alive content moved 200 346 ms 5,746 chrome-stealth
8h ago Alive content moved 200 182 ms 5,746 chrome-stealth
10h ago Alive content moved 200 1,250 ms 5,746 chrome-stealth
12h ago Alive content moved 200 224 ms 5,746 chrome-stealth
15h ago Alive content moved 200 332 ms 5,746 chrome-stealth
17h ago Alive content moved 200 979 ms 5,746 chrome-stealth
19h ago Alive content moved 200 754 ms 5,746 chrome-stealth
21h ago Alive content moved 200 727 ms 5,746 chrome-stealth
23h ago Alive content moved 200 679 ms 5,746 chrome-stealth
1d ago Alive content moved 200 2,333 ms 5,746 chrome-stealth
1d ago Alive content moved 200 3,798 ms 5,746 chrome-stealth
1d ago Alive content moved 200 442 ms 5,746 chrome-stealth
1d ago Alive content moved 200 489 ms 5,746 chrome-stealth
1d ago Alive content moved 200 890 ms 5,746 chrome-stealth
1d ago Alive content moved 200 399 ms 5,746 chrome-stealth
1d ago Alive content moved 200 498 ms 5,746 chrome-stealth
1d ago Alive content moved 200 342 ms 5,746 chrome-stealth
1d ago Alive content moved 200 259 ms 5,746 chrome-stealth
2d ago Alive content moved 200 2,606 ms 5,746 chrome-stealth
2d ago Alive content moved 200 465 ms 5,746 chrome-stealth
2d ago Alive content moved 200 512 ms 5,746 chrome-stealth
2d ago Alive content moved 200 2,161 ms 5,746 chrome-stealth
2d ago Alive content moved 200 583 ms 5,746 chrome-stealth
2d ago Alive content moved 200 524 ms 5,746 chrome-stealth
2d ago Alive content moved 200 321 ms 5,746 chrome-stealth
2d ago Alive content moved 200 715 ms 5,746 chrome-stealth
2d ago Dead-Connection-Timeout - 60,001 ms 0 curl
3d ago Dead-Connection-Timeout - 60,000 ms 0 curl
3d ago Dead-Connection-Timeout - 60,001 ms 0 curl
3d ago Alive content moved 200 594 ms 5,746 chrome-stealth
3d ago Alive content moved 200 692 ms 5,746 chrome-stealth
3d ago Alive content moved 200 1,171 ms 5,746 chrome-stealth
3d ago Alive content moved 200 715 ms 5,746 chrome-stealth
3d ago Alive content moved 200 548 ms 5,746 chrome-stealth
3d ago Alive content moved 200 288 ms 5,746 chrome-stealth
3d ago Alive content moved 200 327 ms 5,746 chrome-stealth
3d ago Alive content moved 200 1,431 ms 5,746 chrome-stealth
3d ago Alive content moved 200 307 ms 5,746 chrome-stealth
3d ago Alive content moved 200 280 ms 5,746 chrome-stealth
4d ago Alive content moved 200 561 ms 5,746 chrome-stealth
4d ago Alive content moved 200 598 ms 5,746 chrome-stealth
4d ago Alive content moved 200 378 ms 5,746 chrome-stealth
4d ago Alive content moved 200 598 ms 5,746 chrome-stealth
4d ago Alive content moved 200 586 ms 5,746 chrome-stealth
4d ago Alive content moved 200 1,949 ms 5,746 chrome-stealth
4d ago Alive content moved 200 908 ms 5,746 chrome-stealth
4d ago Alive content moved 200 412 ms 5,746 chrome-stealth
4d ago Alive content moved 200 377 ms 5,746 chrome-stealth
4d ago Alive content moved 200 384 ms 5,746 chrome-stealth
4d ago Alive content moved 200 1,013 ms 5,746 chrome-stealth
5d ago Alive content moved 200 415 ms 5,746 chrome-stealth
5d ago Alive content moved 200 940 ms 5,746 chrome-stealth
5d ago Alive content moved 200 700 ms 5,746 chrome-stealth
5d ago Alive content moved 200 721 ms 5,746 chrome-stealth
5d ago Alive content moved 200 1,348 ms 5,746 chrome-stealth
5d ago Alive content moved 200 270 ms 5,746 chrome-stealth
5d ago Alive content moved 200 389 ms 5,746 chrome-stealth
security headers
X frame options
SAMEORIGIN
X content type options
nosniff
Cross origin
Cookies
Count
0
Secure
0
Httponly
0
Samesite
0
Score
25
Missing
csphstsreferrer_policypermissions_policycoopcoepcorp
technology detected
Server
Raw
nginx/1.24.0 (Ubuntu)
Name
nginx
Version
1.24.0
Family
nginx
Protocol
http/1.1
what blocks us
Detected
yes
Kind
anubis
Vendor
Anubis
Label
Anubis proof-of-work gate
Confidence
45
Signals
"anubis" marker
Self clearing
no
Waited ms
0
Http code
200
Via
chrome-stealth
contacts published
  • Total0
crypto addresses
  • Total0
forms on the page
Count
1
Kinds
Other
1
Has login
no
Has search
no
Has upload
no
Forms
  • Kind
    other
    Method
    post
    Action
    http://om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion/captcha/validate
    Inputs
    2
    Types
    hidden
    Password
    no
    File
    no
outbound onion links
  • onion_unique not tracked onion_unique
  • onion_total not tracked onion_total
  • clearnet_unique not tracked clearnet_unique
  • internal not tracked internal
  • external not tracked external
  • total not tracked total
  • truncated not tracked truncated
response headers
HeaderValue
cache-control no-cache, private
connection keep-alive
content-encoding gzip
content-type text/html; charset=UTF-8
date Mon, 05 Oct 2026 23:36:20 GMT
server nginx/1.24.0 (Ubuntu)
transfer-encoding chunked
vary Accept-Encoding
x-content-type-options nosniff
x-frame-options SAMEORIGIN

see the whole category →

Screenshot of shiba challenge page

shiba

shibaitobajtr6yctvrijfitnugfulkmprrqbmu2ysk3zyzx2ufe3yqd.onion

Shiba

Alive Ransomware 92.7% up
Screenshot of sarcoma

sarcoma

rup34myhoxqzm5m2jcstdwxl2wgjvournnyiysghyef6wjdyk3ets6qd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 93.6% up
Screenshot of sarcoma

sarcoma

cgewcqt4x7kb7xgkfu2r3yv5wifzvpx6tojonay3kdgs5tqpjvkd5bqd.onion

Source reported this address as offline or seized at import time.

Alive Ransomware 91.8% up