DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://xswap.click/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://xswap.click/
- Submitted IP / ASN
104.21.20.30 AS13335 · Cloudflare, Inc.
- Final URL
- https://xswap.click/swap?c=56&f=BNB
- Final IP / ASN
- 172.67.191.2 AS13335 · CLOUDFLARENET
Final page
- Page title
- Xswap
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 186.1 KB (190564 bytes)
Detections
Activity
- HTTP requests
- 79
- Observed hosts
- 17
- Script records
- 5
Estimated HTTP data
- Sent
- ~39.8 KB
- Received
- ~4.15 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| bsc-dataseed1.bnbchain.org | 2973508 | 2020-01-13 | 2023-08-09 | 2026-10-21 | 2.0 KB | 2.2 KB |  52.49.189.116 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed4.defibit.io 4 alerts | 3858630 | 2019-04-12 | 2021-04-09 | 2026-09-05 | 1.9 KB | 2.2 KB |  99.83.204.86 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| xswap.click | N/A | N/A | N/A | N/A | 3.1 KB | 4.12 MB | 172.67.191.2 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| bsc-dataseed4.bnbchain.org | 4946679 | 2020-01-13 | 2023-09-19 | 2026-10-13 | 2.0 KB | 2.2 KB | 52.49.189.116 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed2.bnbchain.org | 4924478 | 2020-01-13 | 2023-11-12 | 2026-10-18 | 2.0 KB | 2.2 KB | 52.49.189.116 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed.nariox.org | N/A | 2019-04-12 | 2026-08-22 | 2026-09-05 | 1.9 KB | 2.2 KB | 76.223.56.105 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| public-bsc.nownodes.io | N/A | 2019-05-20 | 2025-10-14 | 2026-09-21 | 1.5 KB | 1.4 KB | 104.20.35.2 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| api.xswap.app | N/A | 2025-05-21 | 2026-09-05 | 2026-09-05 | 2.5 KB | 2.4 KB |  43.153.193.136 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-rpc.publicnode.com | 2142410 | 2016-08-16 | 2024-05-08 | 2026-10-18 | 1.9 KB | 2.4 KB | 172.66.150.162 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| binance.nodereal.io | 1804985 | 2021-07-19 | 2022-10-20 | 2026-10-12 | 1.9 KB | 2.2 KB | 54.74.164.50 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed3.bnbchain.org 6 alerts | 5059613 | 2020-01-13 | 2023-12-07 | 2026-10-13 | 3.0 KB | 3.0 KB | 52.49.189.116 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed4.ninicoin.io 7 alerts | 3588323 | 2019-04-12 | 2021-04-13 | 2026-09-05 | 3.5 KB | 3.5 KB | 76.223.51.123 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed2.ninicoin.io 4 alerts | 1960964 | 2019-04-12 | 2021-04-10 | 2026-10-10 | 1.9 KB | 2.2 KB | 76.223.51.123 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed3.ninicoin.io 4 alerts | 4682910 | 2019-04-12 | 2021-04-10 | 2026-09-05 | 1.9 KB | 2.2 KB | 76.223.51.123 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed.bnbchain.org | 2077582 | 2020-01-13 | 2023-08-03 | 2026-10-15 | 3.4 KB | 3.7 KB | 52.49.189.116 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed3.defibit.io 4 alerts | 5605708 | 2019-04-12 | 2021-04-10 | 2026-09-05 | 1.9 KB | 2.2 KB | 99.83.204.86 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bsc-dataseed2.defibit.io 4 alerts | 3869441 | 2019-04-12 | 2021-04-12 | 2026-09-05 | 1.9 KB | 2.2 KB | 99.83.204.86 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |