tornadocash-site[.]github[.]io

PhishDestroy first recorded tornadocash-site.github.io on Feb 26, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current evidence score, computed from those stored observations, is 71/100.

The latest stored availability state is “Last known active” (HTTP 200) on Aug 4, 2026 at 10:03 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 2 detections from 91 scanners in the stored check on Jul 26, 2026 at 02:18 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 4, 2026 at 10:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 2, 2026 at 21:06 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 1, 2026 at 02:12 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 14, 2026 at 02:36 UTC. That result is not evidence of safety. A URLScan capture is stored from Mar 26, 2026 at 11:12 UTC.

Stored context lists registrar MarkMonitor, Inc., IP address 2606:50c0:8000::153, registration date Feb 21, 2026, apparent target Across. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.