Report Overview
Visitedpublic
2026-04-26 14:28:17
Tags
Submit Tags
URL
tornadocash.ws/
Finishing URL
tornadocash.ws/lander
IP / ASN
52.223.13.41
Title
tornadocash.ws/lander
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
csp.secureserver.net | 62352 | 1998-03-30 | 2022-12-18 | 2026-04-20 | 1.1 kB | 1.0 kB |  23.44.47.70 |  |
www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-04-19 | 441 B | 354 B | 142.251.155.119 | |
img1.wsimg.com | 58983 | 2008-03-17 | 2012-06-20 | 2026-04-19 | 2.3 kB | 822 kB |  2.22.225.50 |  |
tornadocash.ws 4 alert(s) on this Host | unknown | 2025-04-14 | 2025-06-03 | 2026-01-18 | 1.0 kB | 1.7 kB | 52.223.13.41 |   |
Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | tornadocash.ws | malicious | Sinkholed |
| DNS4EU | tornadocash.ws | malicious | Sinkholed |
JavaScript (6)
No JavaScripts
HTTP Transactions (10)
| URL | IP | Response | Size |
|---|