Skip to content

Home Posts Engagements Recaps IOCs Detections About

Search posts and IOCs

Loading…

© 2026 cyfar.cav0.2.8DFIR · deception · detection

RSS detections tags about contact support privacy terms

Admin Debug Console Database Backup Archive

http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/ · URL · cyfar.ca

indicatorurl

hxxp://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad[.]onion/

First seen: 2026-05-13
Last seen: 2026-05-28
Sightings: 2

Posts referencing this indicator

The Gentlemen ransomware: Dissecting a self-propagating Go encryptor
Microsoft
Tor leak site operated by The Gentlemen
2026-05-28
DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy
Check Point
The Gentlemen RaaS Tor leak site.
2026-05-13