www.torproject.org - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned www.torproject.org and returned a unknown verdict (score -12). The page resolved to 204.8.99.146 on The Tor Project, Inc. in US. 20 domains and 2 IPs were contacted, over 7 HTTP requests. 1 malware sample communicates with this URL (AsyncRAT). The request followed 2 redirects before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

• Verdict: unknown (score -12) · Confidence 15%
• Scanned URL: https://www.torproject.org/download/download
• Domain: www.torproject.org · IP: 204.8.99.146 · AS62744 · US
• Server: Apache
• Page title: Tor Project | Download
• HTTP status: 200 · text/html
• TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 23 00: · subject CN=www.torproject.org
• HTTP requests captured: 7
• Scan tier: fast · observed 2026-08-21 22:23:05 UTC

Redirect chain

1. https://www.torproject.org/download/download
2. https://www.torproject.org/download
3. https://www.torproject.org/download/

Malware communicating with this URL (1)

These samples were observed contacting or being served from www.torproject.org. Each links to its full analysis.

• AsyncRAT - referenced · 70977d91650a5b8b2eb95deeeb2d6581 · first seen 2026-08-21

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

• Valid TLS, no impersonation or off-origin credential post

Detected technologies

• Apache
• jQuery
• Bootstrap

Contacted infrastructure

• 204.8.99.146 - AS62744 The Tor Project, Inc. (United States)
• 95.216.163.36 - AS24940 Hetzner Online GmbH (Finland)

Observed indicators

• www.torproject.org
• torproject.org
• donate.torproject.org
• support.torproject.org
• community.torproject.org
• blog.torproject.org
• tb-manual.torproject.org
• dist.torproject.org
• play.google.com
• onionbrowser.com
• duckduckgo.com
• forum.torproject.org
• www.facebook.com
• mastodon.social
• www.instagram.com
• twitter.com
• www.linkedin.com
• github.com
• t.me
• gitlab.torproject.org

Other scans of www.torproject.org (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 21 Aug 2026 - unknown · https://support.torproject.org/
• 21 Aug 2026 - unknown · https://blog.torproject.org/lifecycle-of-a-new-relay/
• 21 Aug 2026 - unknown · https://support.torproject.org/

Questions about www.torproject.org

Is www.torproject.org safe?

The scan of www.torproject.org on 21 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.torproject.org?

1 analysed samples communicate with this URL, including AsyncRAT.

How was www.torproject.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.torproject.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan