add red

don't take this crowd seriously

groups.json

@@ -5753,5 +5753,25 @@
         "profile": [
             "https://t.me/k1llsec"
         ]
+    },
+    {
+        "name": "redransomware",
+        "captcha": false,
+        "parser": true,
+        "javascript_render": true,
+        "meta": "skeptical legitimacy & origins with a janky website",
+        "locations": [
+            {
+                "fqdn": "33zo6hifw4usofzdnz74fm2zmhd3zsknog5jboqdgblcbwrmpcqzzbid.onion",
+                "title": null,
+                "version": 3,
+                "slug": "http://33zo6hifw4usofzdnz74fm2zmhd3zsknog5jboqdgblcbwrmpcqzzbid.onion",
+                "available": false,
+                "updated": null,
+                "lastscrape": "2021-05-01 00:00:00.000000",
+                "enabled": true
+            }
+        ],
+        "profile": []
     }
 ]

parsers.py

@@ -1387,3 +1387,14 @@ def killsecurity():
         errlog('killsecurity: ' + 'parsing fail')
     for post in posts:
         appender(post, 'killsecurity')
+
+def redransomware():
+    stdlog('parser: ' + 'redransomware')
+    parser = '''
+    grep '<h4 class="card-header">' source/redransomware-*.html | cut -d '>' -f 2 | cut -d '<' -f 1
+    '''
+    posts = runshellcmd(parser)
+    if len(posts) == 1:
+        errlog('redransomware: ' + 'parsing fail')
+    for post in posts:
+        appender(post, 'redransomware')

posts.json

@@ -51779,6 +51779,66 @@
         "group_name": "stormous",
         "discovered": "2024-03-05 19:40:21.469871"
     },
+    {
+        "post_title": "Thors-Data.dk",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:22.951090"
+    },
+    {
+        "post_title": "Saglobal.com",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.056218"
+    },
+    {
+        "post_title": "Solucionesls.com",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.160621"
+    },
+    {
+        "post_title": "Tecnolite.com",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.262728"
+    },
+    {
+        "post_title": "Baystate.edu",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.365229"
+    },
+    {
+        "post_title": "Kogok.com",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.466542"
+    },
+    {
+        "post_title": "Southcoindustries.com",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.567029"
+    },
+    {
+        "post_title": "Aluminumtrailer.com",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.669419"
+    },
+    {
+        "post_title": "Comohotels.com",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.768577"
+    },
+    {
+        "post_title": "Bendallmednick",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.868986"
+    },
+    {
+        "post_title": "Sfi-wfc.com",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:23.973505"
+    },
+    {
+        "post_title": "K2systems.ca",
+        "group_name": "redransomware",
+        "discovered": "2024-03-05 20:55:24.075753"
+    },
     {
         "post_title": "Enplast",
         "group_name": "8base",

ransomwatch.py

@@ -300,4 +300,5 @@ def appender(name, location):
     parsers.blackout()
     parsers.donex()
     parsers.killsecurity()
+    parsers.redransomware()
     stdlog('ransomwatch: ' + 'parse run complete')