DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://gocrypto3.link/cDVQnX
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://gocrypto3.link/cDVQnX
- Submitted IP / ASN
168.119.245.96 AS24940 · Hetzner Online GmbH
- Final URL
- https://fswap.io/?r_id=cryptoru
- Final IP / ASN
5.252.32.180 AS59796 · StormWall s.r.o.
Final page
- Page title
- Fswap - faster than you think
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 589.1 KB (603197 bytes)
Detections
Activity
- HTTP requests
- 53
- Observed hosts
- 6
- Script records
- 49
Estimated HTTP data
- Sent
- ~26.9 KB
- Received
- ~7.33 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| api.fswap.io | N/A | 2024-05-13 | 2025-11-11 | 2025-11-11 | 1.0 KB | 600.4 KB | 5.252.32.180 | Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. Angie Web servers Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version. C Programming languages C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system. Perl Programming languages Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages. |
| www.google.no | 92680 | 2001-02-26 | 2012-06-26 | 2025-11-09 | 781 B | 580 B |  142.250.74.131 | |
| www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2025-11-09 | 873 B | 739.8 KB | 142.251.38.104 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| region1.analytics.google.com | 22257 | 1997-09-15 | 2022-03-17 | 2025-11-09 | 2.0 KB | 1.6 KB | 216.239.32.36 | |
| gocrypto3.link 1 alerts | N/A | 2025-09-13 | 2025-09-15 | 2025-11-11 | 489 B | 588.6 KB | 168.119.245.96 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| fswap.io | N/A | 2024-05-13 | 2025-11-11 | 2025-11-11 | 21.8 KB | 5.45 MB | 5.252.32.180 | C Programming languages C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system. Perl Programming languages Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages. Angie Web servers Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version. React JavaScript frameworks React is an open-source JavaScript library for building user interfaces or UI components. Webpack Miscellaneous Webpack is an open-source JavaScript module bundler. Next.js JavaScript frameworks, Web frameworks Next.js is a React framework for developing single page Javascript applications. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. |