Cryptostorm

cryptostorm.is · 3 records in Egress and tunnels, IP and proxies · JSON

Records 3

paidCryptostorm (Egress and tunnels)
Egress and tunnelsidentity anonymousno cardevidence documentedstale on 2026-12-05
paidCryptostorm (ip-proxy/cryptostorm)
IP and proxiesidentity anonymousno cardevidence documentedstale on 2026-12-05duplicate
paidCryptostorm (exit addresses)
IP and proxiesidentity anonymousno cardevidence measuredstale on 2026-12-05

Cryptostorm (Egress and tunnels)

Egress and tunnels

cryptostorm.is/Tunnel (hosted): VPN with an anonymous access token, WireGuard and OpenVPN, on shared exit addressesegress/cryptostormJSON compare report an error

Free allowance: No free tier. The cheapest 1-year token is USD 52: the order page lists 'yearly - $52 (4 devices)' as a PayPal subscription and 'one year - $52 (4 devices)' as a single order; the same page lists 'two years - $94 (5 devices)', 'monthly - $6 (1 device)' and 'weekly - $1.86 (1 device)'.
Verdict: paidno free allowance; listed for its price
Cost: no price statedsee Price below
Identity: anonymousno card, no phone
Binding limit: noneno named constraint binds
Evidence: documented18 sources; a first-party page was read and the sentence quoted
Freshness: stale on 2026-12-05checked 2026-11-04 (live); stale on 2026-12-05

Free tier	No free tier. The cheapest 1-year token is USD 52: the order page lists 'yearly - $52 (4 devices)' as a PayPal subscription and 'one year - $52 (4 devices)' as a single order; the same page lists 'two years - $94 (5 devices)', 'monthly - $6 (1 device)' and 'weekly - $1.86 (1 device)'. unit none; metered on none; Prices are read from the order forms of the vendor's home page. The FAQ states a device limit that depends on the token's duration: one year gives 4 WireGuard keys and 4 OpenVPN sessions.
Price	USD 52 for a 1-year token (4 devices); a subscription price, not a per-TB price
Limits	volume-quota none published: "No. We don't do any kind of throttling/QoS."; servers are 1 Gbps (10 Gbps at Switzerland, Finland, Atlanta, Chicago and Oregon) source per-ip-shaping shared exit addresses: 'Currently over 450 available IPs', used by many clients at once, so destination-side limits and reputation on an address apply to every client behind it source Concurrent connections are capped by token length and the vocabulary has no kind for it: a one-week or one-month token allows 1 WireGuard key and 1 OpenVPN session, a one-year token allows 4 and 4, a two-year token 5 and 5, a lifetime token 6 and 6.
Binding	none No byte quota, speed cap or request rate is published; the only stated ceiling is the concurrent-session count of the token, which the limit vocabulary cannot name.
Identity	anonymous A token is the account. The order page's Monero form is labelled 'no 3rd parties, no email or JS required', and the vendor states it accepts Monero 'so people can order an access token anonymously without providing any personal information'. Card and PayPal orders go through PayPal or CCBill, and only recurring subscriptions get the token by email; other orders show it in the browser. The vendor states it has no KYC policy.
Egress	No byte cap and no throttling are stated: the FAQ answers 'Are there any speed/traffic limits?' with "No. We don't do any kind of throttling/QoS." Servers are 1 Gbps, and 10 Gbps at five named sites; bandwidth is shared with other servers in the same cabinet. free allowance: none: no free tier
Retention	not applicable: a tunnel, not stored bytes
Interface	unknown A tunnel, not a data API: OpenVPN (ECC and RSA configurations) and WireGuard, authenticated with a token. Protocols: OpenVPN and WireGuard. UDP: the home page states 'UDP or TCP (1-65535)', so both transports run on any port. Port forwarding: yes, from 30000 to 65535, enabled at http://10.31.33.7/fwd inside the tunnel, 100 forwards per internal IP on each server. SOCKS5 endpoint: unverified: no page read states one. Obfuscation: SSH, HTTPS (Xray or stunnel) and obfs4. BitTorrent: allowed ('BitTorrent allowed').
Tooling	Any OpenVPN or WireGuard client with the vendor's published server configs; the vendor states all server-side configs are public. Port forwards are made from a web page reachable only inside the tunnel. The vocabulary has no wireguard, openvpn or socks5 interface token, so the interface list says unknown.
Composes with	A tunnel exit for traffic that must leave from a shared VPN address: a job connects with a token, and the upstream sees one of the provider's shared addresses (over 450 IPs listed).
Reliability	The FAQ states servers share bandwidth with other servers in the same cabinet, so peak hours can lower speed; port forwards are per server and have to be recreated when moving to another server.
Notes	Cheapest yearly price: USD 52 for 1 year, 4 devices (2 years: USD 94, 5 devices). The port-forwarding page says the vendor runs a yearly half-off sale every Black Friday to Cyber Monday; the price above is the list price read on the page.
Evidence note	documented Documented: price, protocols, UDP, port forwarding, obfuscation and the BitTorrent line are quoted from the vendor's own home page, FAQ and port-forwarding page. Nothing was connected through the service, so no speed, address class or forwarding behaviour is measured. A SOCKS5 endpoint is unverified because no page read mentions one.
Parsed numbers	has-free-tier 0 price USD 52

Evidence 18

date	source	what it proved
2026-11-04	cryptostorm.is/	The 1-year token is USD 52 for 4 devices on the order form.
2026-11-04	cryptostorm.is/	The 2-year token is USD 94 for 5 devices.
2026-11-04	cryptostorm.is/	The Monero order form needs no email and no JavaScript.
2026-11-04	cryptostorm.is/	Both transports on any port from 1 to 65535.
2026-11-04	cryptostorm.is/	The home page states BitTorrent is allowed.
2026-11-04	cryptostorm.is/	The home page states port forwarding is supported.
2026-11-04	cryptostorm.is/	Obfuscation by SSH, HTTPS (Xray or stunnel) and obfs4.
2026-11-04	cryptostorm.is/	WireGuard is offered (its ciphersuite is listed).
2026-11-04	cryptostorm.is/	OpenVPN is offered with ECC configurations.
2026-11-04	cryptostorm.is/	Exit addresses are shared; over 450 are listed.
2026-11-04	cryptostorm.is/faq	The FAQ states no speed or traffic limits.
2026-11-04	cryptostorm.is/faq	A 1-year token allows 4 WireGuard keys and 4 OpenVPN sessions.
2026-11-04	cryptostorm.is/faq	Only recurring subscriptions receive the token by email; other orders show it in the browser.
2026-11-04	cryptostorm.is/portfwd	Forwarded ports run from 30000 to 65535.
2026-11-04	cryptostorm.is/portfwd	Forward limit is 100 per internal IP on each server.
2026-11-04	cryptostorm.is/portfwd	BitTorrent works without a forward; the forward improves swarm reachability.
2026-11-04	cryptostorm.is/tos	A token can be ordered anonymously with Monero.
2026-11-04	cryptostorm.is/tos	the vendor states it implements no age or ID verification

Unknown values 2

interface: the access interface was not established
per object cap stated: the field does not apply to this kind of offer

Cryptostorm (ip-proxy/cryptostorm)

IP and proxies

cryptostorm.is/VPN subscription (exit source)ip-proxy/cryptostormJSON compare report an error

Free allowance: No free tier. The cheapest 1-year token is USD 52: the order page lists 'yearly - $52 (4 devices)' as a PayPal subscription and 'one year - $52 (4 devices)' as a single order; the same page lists 'two years - $94 (5 devices)', 'monthly - $6 (1 device)' and 'weekly - $1.86 (1 device)'.
Verdict: paidno free allowance; listed for its price
Cost: no price statedsee Price below
Identity: anonymousno card, no phone
Binding limit: noneno named constraint binds
Evidence: documented18 sources; a first-party page was read and the sentence quoted
Freshness: stale on 2026-12-05checked 2026-11-04 (live); stale on 2026-12-05

Free tier	No free tier. The cheapest 1-year token is USD 52: the order page lists 'yearly - $52 (4 devices)' as a PayPal subscription and 'one year - $52 (4 devices)' as a single order; the same page lists 'two years - $94 (5 devices)', 'monthly - $6 (1 device)' and 'weekly - $1.86 (1 device)'. unit none; metered on none; Prices are read from the order forms of the vendor's home page. The FAQ states a device limit that depends on the token's duration: one year gives 4 WireGuard keys and 4 OpenVPN sessions.
Price	USD 52 for a 1-year token (4 devices); a subscription price, not a per-TB price
Limits	volume-quota none published: "No. We don't do any kind of throttling/QoS."; servers are 1 Gbps (10 Gbps at Switzerland, Finland, Atlanta, Chicago and Oregon) source per-ip-shaping shared exit addresses: 'Currently over 450 available IPs', used by many clients at once, so destination-side limits and reputation on an address apply to every client behind it source Concurrent connections are capped by token length and the vocabulary has no kind for it: a one-week or one-month token allows 1 WireGuard key and 1 OpenVPN session, a one-year token allows 4 and 4, a two-year token 5 and 5, a lifetime token 6 and 6.
Binding	none No byte quota, speed cap or request rate is published; the only stated ceiling is the concurrent-session count of the token, which the limit vocabulary cannot name.
Identity	anonymous A token is the account. The order page's Monero form is labelled 'no 3rd parties, no email or JS required', and the vendor states it accepts Monero 'so people can order an access token anonymously without providing any personal information'. Card and PayPal orders go through PayPal or CCBill, and only recurring subscriptions get the token by email; other orders show it in the browser. The vendor states it has no KYC policy.
Egress	No byte cap and no throttling are stated: the FAQ answers 'Are there any speed/traffic limits?' with "No. We don't do any kind of throttling/QoS." Servers are 1 Gbps, and 10 Gbps at five named sites; bandwidth is shared with other servers in the same cabinet. free allowance: none: no free tier
Retention	not applicable: a tunnel, not stored bytes
Interface	unknown A tunnel, not a data API: OpenVPN (ECC and RSA configurations) and WireGuard, authenticated with a token. Protocols: OpenVPN and WireGuard. UDP: the home page states 'UDP or TCP (1-65535)', so both transports run on any port. Port forwarding: yes, from 30000 to 65535, enabled at http://10.31.33.7/fwd inside the tunnel, 100 forwards per internal IP on each server. SOCKS5 endpoint: unverified: no page read states one. Obfuscation: SSH, HTTPS (Xray or stunnel) and obfs4. BitTorrent: allowed ('BitTorrent allowed').
Tooling	Any OpenVPN or WireGuard client with the vendor's published server configs; the vendor states all server-side configs are public. Port forwards are made from a web page reachable only inside the tunnel. The vocabulary has no wireguard, openvpn or socks5 interface token, so the interface list says unknown.
Composes with	A tunnel exit for traffic that must leave from a shared VPN address: a job connects with a token, and the upstream sees one of the provider's shared addresses (over 450 IPs listed).
Reliability	The FAQ states servers share bandwidth with other servers in the same cabinet, so peak hours can lower speed; port forwards are per server and have to be recreated when moving to another server.
Notes	Duplicate of egress/cryptostorm, which holds the offer: both records cite the same vendor page.
Evidence note	documented Documented: price, protocols, UDP, port forwarding, obfuscation and the BitTorrent line are quoted from the vendor's own home page, FAQ and port-forwarding page. Nothing was connected through the service, so no speed, address class or forwarding behaviour is measured. A SOCKS5 endpoint is unverified because no page read mentions one.
Parsed numbers	has-free-tier 0 price USD 52

Evidence 18

date	source	what it proved
2026-11-04	cryptostorm.is/	The 1-year token is USD 52 for 4 devices on the order form.
2026-11-04	cryptostorm.is/	The 2-year token is USD 94 for 5 devices.
2026-11-04	cryptostorm.is/	The Monero order form needs no email and no JavaScript.
2026-11-04	cryptostorm.is/	Both transports on any port from 1 to 65535.
2026-11-04	cryptostorm.is/	The home page states BitTorrent is allowed.
2026-11-04	cryptostorm.is/	The home page states port forwarding is supported.
2026-11-04	cryptostorm.is/	Obfuscation by SSH, HTTPS (Xray or stunnel) and obfs4.
2026-11-04	cryptostorm.is/	WireGuard is offered (its ciphersuite is listed).
2026-11-04	cryptostorm.is/	OpenVPN is offered with ECC configurations.
2026-11-04	cryptostorm.is/	Exit addresses are shared; over 450 are listed.
2026-11-04	cryptostorm.is/faq	The FAQ states no speed or traffic limits.
2026-11-04	cryptostorm.is/faq	A 1-year token allows 4 WireGuard keys and 4 OpenVPN sessions.
2026-11-04	cryptostorm.is/faq	Only recurring subscriptions receive the token by email; other orders show it in the browser.
2026-11-04	cryptostorm.is/portfwd	Forwarded ports run from 30000 to 65535.
2026-11-04	cryptostorm.is/portfwd	Forward limit is 100 per internal IP on each server.
2026-11-04	cryptostorm.is/portfwd	BitTorrent works without a forward; the forward improves swarm reachability.
2026-11-04	cryptostorm.is/tos	A token can be ordered anonymously with Monero.
2026-11-04	cryptostorm.is/	the vendor page that both records cite shows the same offer, which the egress record holds

Unknown values 2

interface: the access interface was not established
per object cap stated: the field does not apply to this kind of offer

Cryptostorm (exit addresses)

IP and proxies

cryptostorm.is/VPN subscription (exit source)ip-proxy/cryptostorm-exitsJSON compare report an error

Free allowance: No free tier read. Access is a token bought by duration; the captured pages state no amount, so no price is recorded.
Verdict: paidno free allowance; listed for its price
Cost: no price stated
Identity: anonymousno card, no phone
Binding limit: noneno named constraint binds
Evidence: measured4 sources; a live request was made and its output kept
Freshness: stale on 2026-12-05checked 2026-11-04 (live); stale on 2026-12-05

Free tier	No free tier read. Access is a token bought by duration; the captured pages state no amount, so no price is recorded. unit none; metered on none; The price is the vendor's plan rate for the subscription whose exits are classified here; the exit-address measurement itself has no price.
Price	none stated
Limits	per-ip-shaping token duration sets the device limit: a one year token allows 4 WireGuard keys and 4 OpenVPN sessions source
Binding	none No limit kind binds the record: it measures exit addresses and states no byte quota or request rate. What matters is list membership: 35 of 36 sampled exits are on a datacenter list.
Identity	anonymous Tokens are delivered in the browser, and only recurring PayPal or CCBill subscribers get a token by email; the FAQ advises cryptocurrency and a disposable email for more anonymity. Whether the purchase form asks for an email is unverified.
Egress	unverified: no traffic allowance or per-GB price appears in the captured pages; metered is recorded false because no metered charge was read. free allowance: none published
Retention	not applicable: an address, not an object
Interface	unknown The server list at https://cryptostorm.is/configs/ is the source of the exit addresses classified here. The schema interface enum has no token for a VPN tunnel, so the tunnel protocols are not recorded as an interface. endpoint: https://cryptostorm.is/configs/
Tooling	The exit addresses are read from https://cryptostorm.is/configs/ and classified with an IP-class detector; the service itself is reached with the vendor's own client or a WireGuard or OpenVPN configuration.
Composes with	A Worker or a free compute node dials the tunnel and the traffic leaves at one of these exit addresses, so the upstream sees an address in the ASNs listed here and not the caller's network.
Reliability	35 of 36 sampled exit addresses are on a datacenter list and 23 of 36 on a VPN list, so a site that blocks those lists blocks most of this fleet; 0 of 36 are also on an abuse list.
Notes	List membership of 36 exit addresses (detector index version 20261103T163900Z-00d117b2, 2026-11-03): datacenter 35, VPN 23, abuse 0, none of the three 1. VPN list: 23 of 36, of which 23 are in the x4b VPN list. Definitions: datacenter is an address inside a range the x4b datacenter list publishes; VPN is inside the x4b VPN list or a per-provider server list; abuse is on at least one independent abuse family; none of the three states list membership, not physical siting.
Evidence note	measured The list membership, ASN spread and counts are measured: each address was answered by the detector at the stated index version. The plan price and the identity class are documented from the vendor's captured pages; where a page did not state them they are unverified. The sample is the addresses the vendor endpoint returned, not proof that every address a user is handed is in it.
Parsed numbers	has-free-tier 0

Evidence 4

date	source	what it proved
2026-11-03	probe: `https://cryptostorm.is/configs/`	The vendor endpoint https://cryptostorm.is/configs/ gave 36 IPv4 exit addresses, each answered by the address-class detector at index version 20261103T163900Z-00d117b2 on 2026-11-03. Datacenter list: 35 of 36; VPN list: 23 of 36 (23 in the x4b VPN list); abuse list: 0 of 36; on none of the three: 1 of 36. 14 distinct ASNs and 36 distinct /24s; largest ASN AS9009 M247 M247 Europe SRL with 23 addresses.
2026-11-03	probe: `https://cryptostorm.is/configs/`	Detector index version 20261103T163900Z-00d117b2 was the one every one of the 36 answers carries.
2026-11-04	cryptostorm.is/faq	token duration sets the device limit; a one year token allows 4 WireGuard keys and 4 OpenVPN sessions
2026-11-04	cryptostorm.is/faq	the token is delivered in the browser unless the buyer holds a recurring subscription

More fields 4

rung	4
rung note	Addresses came from the vendor's own server list and each was classified; no exit was connected to, so the address a user is handed at connect time was not observed.
list membership	`{"measured_on": "2026-11-03","n": 36,"datacenter": 35,"vpn": 23,"vpn_in_x4b": 23,"abuse": 0,"none_of_the_three": 1,"detector_index_version": "20261103T163900Z-00d117b2","probed_at": "2026-11-03T17:20:54Z","endpoint": "POST https://cryptostorm.is/configs/ (iponly=on)"}`
asn diversity	`{"measured_on": "2026-11-03","addresses": 36,"subnets_24": 36,"asns": 14,"largest_asn": "AS9009 M247 M247 Europe SRL","largest_asn_addresses": 23,"largest_asn_share": "64%"}`

Unknown values 2

interface: the access interface was not established
per object cap stated: the field does not apply to this kind of offer