Security Scan Report: quickswap.gtokentool.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 5 countries across 13 domains to perform 245 HTTP transactions. The main domain is gtokentool.com and was registered 2 years ago.

Submitted URL: https://quickswap.gtokentool.com/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Crypto token-launch dApp with wallet connect; flagged by 17 CRITICAL IDS alerts for EtherHiding malware exfiltration plus multiple single-source phishing reports. No forms, but avoid connecting a wallet.

Risk Factors (4)
CRITICAL IDS malware alerts indicating EtherHiding exfiltration/C2 activity
Multiple single-source phishing reports against the hosting and subdomain
Crypto token-launch platform soliciting wallet connection on an unranked domain
Wallet-connect plus token/pre-sale features are a high-risk value-transfer context
Domain age information unavailable

Details

Page Title

GTokenTool行业领先的一键发币平台

Scan Type

public

Domain Name Analysis

The domain 'quickswap.gtokentool.com' uses the commercial generic top-level domain (.com) with subdomain 'quickswap'. Count 10 characters in 'gtokentool' holding 4 vowels versus six consonants. Breaking it apart gives 3 words: g, token, tool. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://quickswap.gtokentool.com/

Page Load Overview

2.50s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Text Length:1,332 chars
Detector Agreement:20%

Website Classification

Primary Category

cryptocurrency blockchain100% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
100%
technology software
100%
finance banking
100%
documentation technical
98%
corporate business
98%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24216.150.16.193Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
13216.150.16.1Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
13104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
1364.239.123.65Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1313.124.35.187Aws · CLOUDSouth Korea
AS16509Amazon.com, Inc.
13103.50.32.51City of London, England, United Kingdom
AS396356Latitude.sh
1354.74.164.50Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
13142.250.154.94Google · CDNUnited States
AS15169Google LLC
1313.248.176.134Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
24518--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13F94A2525A8CBF4F14074FBB94AB207C8D8B60450BB276F683E9D6EE9078F5706850F9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:nTygBBtyjT1c2uIPePmPhzHgMhvFI/DE7Q:nlyjTruIPePmPfFIQs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:419305:QBKjWBAoioABjAGIgbgAABgAkICp8AhPg9lEQIAhhU9JgUKQMbASSET2CMIjKZx2NkaiIUDiKAAslKkwUDABIwgDEANBAQCk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c6e6cf0be702
Perceptual Hash:b55a6aad1ae61aa1
Difference Hash:630a8c8c12d6ce4e
Wavelet Hash:0100e6f6ef0fef03
Color Hash:#40bfb7

Scan History

Scan history not available

Unable to load historical scan data