{"report_id":"596fd6c5-58b3-4c2e-be7e-ee5fdd608516","version":0,"status":"done","tags":[],"date":"2026-09-19T07:18:12Z","url":{"schema":"http","addr":"web-simpleswap.to/","fqdn":"web-simpleswap.to","domain":"web-simpleswap.to","tld":"to"},"ip":{"addr":"217.60.195.241","port":0,"asn":209373,"as":"Swissnet LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"web-simpleswap.to/","fqdn":"web-simpleswap.to","domain":"web-simpleswap.to","tld":"to"},"title":"SimpleSwap Review 2025: Is It Legit \u0026 Safe? (Expert Analysis)","dom":{"size":35782,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18549)","md5":"fd3cf3db2f092ed703ba9a64748d50a4","sha1":"411376034d5dc6c228fb26a1a566db6648427dfe","sha256":"f8a019f0d724e42d69043a261b91ecd3cc889a33a42ade8bea897975984b780c","sha512":"54f8437f6147a2a66b582662097ac6db61a41ef22317dfe07e8e1120cb75220d0e1fa5caa099e6487a526a59007b3c5f9e524d666e496bc4522c0a11c8e0b9e7","ssdeep":"768:FTGsme3/nf3/nmwUBVtVJVsmpFuHT3J6MF:JGsmen+3tz+UesMF","tlshash":"02f2b727a2443736074f024579be53ffa66e80c96313cba8b67e426c4bc955c453bf8a","dom_hash":"domhashe995ebfe3ae42ac42a8ee0d7f932d4de","first_seen":"2026-09-19T07:13:49.461239Z","last_seen":"2026-09-19T07:18:12.926874Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"web-simpleswap.to/","fqdn":"web-simpleswap.to","domain":"web-simpleswap.to","tld":"to"},"ip":{"addr":"217.60.195.241","port":0,"asn":209373,"as":"Swissnet LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T07:18:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"web-simpleswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"web-simpleswap.to","ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T07:13:45.945005Z","last_seen":"2026-09-19T07:13:45.945005Z","alert_count":2,"request_count":2,"received_data":36456,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web-simpleswap.to/","fqdn":"web-simpleswap.to","domain":"web-simpleswap.to","tld":"to"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b0a3c045f2aefc0f640f6d2ffb9a3da","sha1":"2fceeda4f8276b08c76b4aa166c3e632df929892","sha256":"5681c235eb5e985ce6c037066460c28aa9b6717c4be439b44d476f71c6e77d51","sha512":"3e2abb27c4d7dd8848421e3d656ff343c771f889e994d05b004664481f96267245bd8e49aca27a455a07cbbcc7c90e5d37623d44ac1fb7d05f81b8ff1271a95a","ssdeep":"","tlshash":"f9e0cd1f7ee53530917bb729937fb398793720873041c469395c45490f559400893cd9","size":327,"data":"","first_seen":"2026-09-19T07:13:49.471892Z","last_seen":"2026-09-19T07:18:12.930208Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"web-simpleswap.to/","fqdn":"web-simpleswap.to","domain":"web-simpleswap.to","tld":"to"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T07:17:43.584Z","timestamp":1789802263584,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-simpleswap.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 13:39:56 GMT","end":"Tue, 03 Nov 2026 13:39:55 GMT"},"fingerprint":{"sha1":"16:65:41:21:D7:76:DF:96:5F:7C:D2:76:85:16:0E:9E:C4:47:6C:D4","sha256":"9A:DB:A1:FD:AE:B9:42:F1:DB:5D:67:84:80:E7:DB:B4:AB:A7:96:C1:FF:3B:C2:CE:79:EA:07:3E:EC:C4:74:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web-simpleswap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 19 Sep 2026 07:17:52 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Thu, 13 Aug 2026 18:30:56 GMT\r\nETag: W/\"6a7e0d60-8b36\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":35638,"size_decoded":11002,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18412)","md5":"75e8a603730da85f76fbdb72ab10b135","sha1":"cfa4d08a32015c13881196d2daca9821945d2077","sha256":"7acf86589725c3f92e379d54bba45b8ca49d05699a4a961e639eae92a0232c5b","sha512":"9362688ecb5404968cdf4f9200cc61b79c0b580e94f1e3311488d241285f3de04648086fcfe9de6955316f93e6f2fa4f25a4876dcea8e4678481c56f9b2d073e","ssdeep":"768:LTesmen/nfb/nmhqBvnLfV6gybu1T3J2sX:3esmeXSunbMjM4sX","tlshash":"08f2c717a2443736074f024539be53ffa66e80c97312cba8b67d866c47c955c453bf8a","first_seen":"2026-09-19T07:13:49.46507Z","last_seen":"2026-09-19T07:18:12.928983Z","times_seen":3,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":78,"connect":27,"send":0,"wait":99,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"web-simpleswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-simpleswap.to/assets/favicon/favicon.png","fqdn":"web-simpleswap.to","domain":"web-simpleswap.to","tld":"to"},"ip":{"addr":"217.60.195.241","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web-simpleswap.to/","date":"2026-09-19T07:17:44.026Z","timestamp":1789802264026,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web-simpleswap.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 13:39:56 GMT","end":"Tue, 03 Nov 2026 13:39:55 GMT"},"fingerprint":{"sha1":"16:65:41:21:D7:76:DF:96:5F:7C:D2:76:85:16:0E:9E:C4:47:6C:D4","sha256":"9A:DB:A1:FD:AE:B9:42:F1:DB:5D:67:84:80:E7:DB:B4:AB:A7:96:C1:FF:3B:C2:CE:79:EA:07:3E:EC:C4:74:3A"}}},"request":{"raw":"GET /assets/favicon/favicon.png HTTP/1.1\r\nHost: web-simpleswap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web-simpleswap.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 19 Sep 2026 07:17:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 318\r\nConnection: keep-alive\r\nLast-Modified: Tue, 04 Aug 2026 16:40:14 GMT\r\nETag: \"6a7215ee-13e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":318,"size_decoded":562,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit colormap, non-interlaced","md5":"1a2c007269e892d65a8f55198d48dc24","sha1":"8951dbf365b9349c8c96414b5985f7b7c0946477","sha256":"80ce3edcf677d4f41925d3d4b9d992f09fdada19f03e1ee8c4196d1a7aa92dc1","sha512":"79fb04fe7f9ce57f96f13cbb61451bc04baebb45242becb6db495395896628095e85fabe8f4d2974cbae25d63f18650ead5e29595da6bcc6a5163ca24007c006","ssdeep":"","tlshash":"63e02dc3301c9f3eb890432ab02e0000f85b057a93930b0ca20400f090c22088ad0248","first_seen":"2025-07-21T04:13:16.266108Z","last_seen":"2026-09-19T07:18:12.929615Z","times_seen":7,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"web-simpleswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}