RAMP

RAMP

Active Since

July 2021

Dark Web or Clear Web

Dark Web

Predominant Language

Russian

Known Admins / Moderators

Admin, Nowheretogo, chaindel, vAz

The RAMP cybercrime forum is also considered “friendly” to Exploit and XSS, with one key differentiating factor: the forum widely accepts discussions about ransomware.

As a result, it is common to see threat actors launching new Ransomware-as-a-Service ventures and attempting to recruit affiliates here.

RAMP also seeks to welcome actors speaking languages other than English and Russian, and has been making an effort to translate key components into Mandarin to attract Chinese threat actors, though their presence remains limited so far. The forum sees less activity than XSS and Exploit, likely in part due to the cost of obtaining an account.

OFFLINE UPDATE JANUARY 2026

RAMP was seized by US law enforcement on January 28th, 2026, taking down both its Tor and clearweb domains. A suspected administrator of the site stated they do not intend to build a new forum “from scratch” to replace it.

The Beacon Newsletter

Get news, insights & intelligence straight to your inbox