# PhishDestroy domain threat record: bswcore.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/bswcore.com/ Machine-readable companion: https://phishdestroy.io/domain/bswcore.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 17:07:05 UTC - Last availability or vendor check: 2026-10-22 17:10:46 UTC - Stored record updated: 2026-10-22 18:30:22 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: biswap ## Stored infrastructure - Observed IP address: 104.21.82.239 - Registrar in stored WHOIS data: GMO Internet Group, Inc. d/b/a Onamae.com - Last stored HTTP status: 200 - Registration date in stored WHOIS data: 2026-10-20 03:22:30 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16497-00f6-70bb-afb9-e9ad79e86b25/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bswcore.com - Certificate Transparency search: https://crt.sh/?q=%25.bswcore.com - Web Archive lookup: https://web.archive.org/web/*/https://bswcore.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added bswcore.com to its internal blocklist after an admin report on 2026-10-22. The recorded page title is “BSW”. The intake AI could not determine malicious behavior and marked the verdict as unknown. An HTTP 200 response was observed on 2026-10-22 confirming the site was reachable at that time. How the scam works The current evidence does not demonstrate a specific fraud technique; the domain is simply flagged as suspicious, a precaution often applied to newly created sites that could later be used for phishing, credential harvesting, or fraudulent services. Evidence VirusTotal scanned the domain on 2026-10-20 (retrieved 2026-10-22) and reported 0 malicious and 0 suspicious detections out of 92 engines. Google Safe Browsing checked on 2026-10-22 and did not flag the site. URLScan captured two snapshots on 2026-10-22: the first received a clean verdict, the second had machine‑learning engines flagging it as malicious with a score of 97 but the overall verdict remained non‑malicious. OTX listed 0 pulses on 2026-10-22. No external blocklists reported the domain (count 0) on 2026-10-22. PhishDestroy’s internal blocklist marks it as true on 2026-10-22. Infrastructure The domain was registered on 2026-10-20 through GMO Internet Group, Inc. (Onamae.com). It is served behind Cloudflare, with recorded IP addresses 104.21.82.239 and 172.67.209.74 located in Canada. TLS was provided by Let’s Encrypt, valid from 2026-10-20 to 2027-01-18, and the site presented an HSTS header; DNSSEC was not observed. A subdomain h5-api.bswcore.com also resolves. Nameservers are carla.ns.cloudflare.com and vasilii.ns.cloudflare.com. What to do Visitors should avoid entering any credentials, personal data, or wallet information on bswcore.com until its purpose is clarified. If any sensitive information was submitted, change associated passwords and monitor accounts for unusual activity. Defenders can block the exact domain name in firewalls or proxy filters and log DNS queries for further investigation. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16497-00f6-70bb-afb9-e9ad79e86b25/ Cloudflare Radar report: https://radar.cloudflare.com/scan/3267f3ac-c940-4a23-a137-6ea68af711b7 Stored capture screenshot: https://i.ibb.co/7tnYXMZ5/66962eff3f8b.png Cloudflare Radar screenshot (2026-10-22T17:09:40Z): https://screenshots.phishdestroy.io/cf/3267f3ac-c940-4a23-a137-6ea68af711b7.png URLScan screenshot (2026-10-22T07:09:28Z): https://screenshots.phishdestroy.io/us/01a16271-1ca3-72a9-9444-4690c23c285b.png URLScan capture report: https://urlscan.io/result/01a16271-1ca3-72a9-9444-4690c23c285b/ VirusTotal report: https://www.virustotal.com/gui/domain/bswcore.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bswcore.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 17:12:29 UTC ## Stored page captures - Primary capture: https://i.ibb.co/7tnYXMZ5/66962eff3f8b.png Captured: 2026-10-22 17:10:46 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a16497-00f6-70bb-afb9-e9ad79e86b25.png Captured: 2026-10-22 17:10:46 UTC Source report: https://urlscan.io/result/01a16497-00f6-70bb-afb9-e9ad79e86b25/ - URLScan capture 2: https://urlscan.io/screenshots/01a16271-1ca3-72a9-9444-4690c23c285b.png Captured: 2026-10-22 17:07:05 UTC Source report: https://urlscan.io/result/01a16497-00f6-70bb-afb9-e9ad79e86b25/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/3267f3ac-c940-4a23-a137-6ea68af711b7.png Captured: 2026-10-22 17:09:40 UTC Source report: https://radar.cloudflare.com/scan/3267f3ac-c940-4a23-a137-6ea68af711b7 SHA-256: e9b57e172e3fb5bb2a294091deee561d38fa4855c9ebb35a6ecc9a1df3b99418 - URLQuery: https://screenshots.phishdestroy.io/uq/8080f11f-5caa-4ade-9e89-f3ed539d9714.png Source report: https://urlquery.net/report/8080f11f-5caa-4ade-9e89-f3ed539d9714 SHA-256: 84336121c35a4cdee6575ce82c33438869b722f9ddfd4b157bff12da91fb4695 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a16271-1ca3-72a9-9444-4690c23c285b.png Captured: 2026-10-22 07:09:28 UTC Source report: https://urlscan.io/result/01a16271-1ca3-72a9-9444-4690c23c285b/ SHA-256: e2226a88acc5cae0246787673669d6abd225ad4ad7a3a024454f17091298f493 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1649b-ebbc-7266-a9ca-1ef37ab15cc6.png Captured: 2026-10-22 17:15:10 UTC Source report: https://urlscan.io/result/01a1649b-ebbc-7266-a9ca-1ef37ab15cc6/ SHA-256: 04a495472040765f5e556b3f64bcac06be5d7586cc88220b4f3d2fb93176f058 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T17:11:26Z", "uuid": "01a16497-00f6-70bb-afb9-e9ad79e86b25", "scanned_at": "2026-10-22T17:09:51Z", "final_url": "https://bswcore.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bswcore.com/", "from": "http://bswcore.com/", "status": 307 } ], "ip": "172.67.209.74", "domains": [ "coinmm.oss-ap-northeast-1.aliyuncs.com", "h5-api.bswcore.com" ], "ips": [ "47.79.80.48", "172.67.209.74" ], "asns": [ "45102", "13335" ], "countries": [ "JP" ], "doc_hash": "24e1cb19028f919b69c935e2036afdd15a190e13a69e7e3dcbd0694d16a487c0", "script_hashes": [ "cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151", "d32672ba327358bb1559fb25738c01433afc1de78d6382f2a9da6d9103965ddc", "a1d538f19bd88734d9e37bd23671f6d65d89b79a7fac35f4c16a2de3749c24d9", "c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd", "15b38c543ca6c1775a885ffec038f09922b6c30bb79c53f638226d991b4446f4" ], "globals": [ "TradingView", "__ACChat", "addLink", "addMeta", "lib", "rem", "dpr", "__VUE_INSTANCE_SETTERS__", "__VUE_SSR_SETTERS__", "gsapVersions", "__INTLIFY_PROD_DEVTOOLS__", "__INTLIFY_JIT_COMPILATION__", "__INTLIFY_DROP_MESSAGE_COMPILER__", "__VUE_I18N_FULL_INSTALL__", "__VUE_I18N_LEGACY_API__", "PubSub", "setImmediate", "clearImmediate", "__config", "__theme", "__VUE__", "__vite_is_modern_browser", "ACChat" ], "cookies": [ "JSESSIONID" ], "storage_keys": [ "BSW_THEME", "main", "BSW_LANGUAGE" ], "tls": { "san": [ "*.bswcore.com", "bswcore.com" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bswcore.com", "protocol": "QUIC", "valid_to": "2027-01-18T04:33:49Z", "valid_from": "2026-10-20T04:33:50Z" }, "domain_age_days": 1, "apex_age_days": 1, "tls_age_days": 2, "tls_valid_days": 89, "requests": 66, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T17:11:28Z", "uuid": "3267f3ac-c940-4a23-a137-6ea68af711b7", "scanned_at": "2026-10-22T17:09:40Z", "final_url": "https://bswcore.com/", "status": 200, "history": [ { "url": "https://bswcore.com/", "status": 200 } ], "dom_hash": "b54872147c713c7aa1fee42b9af775e0ee6438555be91df2c728ed281ff9e9c1", "doc_hash": "8d3ef4291bce0860ad626f1b900266c51ffc73244b66fa67afbd4a404f5007eb", "domain_risks": [ "Newly Seen Domains", "Security Risks", "New Domains" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bswcore.com", "type": "A", "value": "172.67.209.74" }, { "name": "bswcore.com", "type": "A", "value": "104.21.82.239" }, { "name": "bswcore.com", "type": "AAAA", "value": "2606:4700:3030::ac43:d14a" }, { "name": "bswcore.com", "type": "AAAA", "value": "2606:4700:3034::6815:52ef" }, { "name": "h5-api.bswcore.com", "type": "A", "value": "172.67.209.74" }, { "name": "h5-api.bswcore.com", "type": "A", "value": "104.21.82.239" }, { "name": "h5-api.bswcore.com", "type": "AAAA", "value": "2606:4700:3030::ac43:d14a" }, { "name": "h5-api.bswcore.com", "type": "AAAA", "value": "2606:4700:3034::6815:52ef" } ], "dnssec_valid": false, "ip": "172.67.209.74", "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-10-20T05:22:30Z", "updated": "2026-10-20T05:28:37Z", "expires": "2027-10-20T05:22:30Z", "nameservers": [ "carla.ns.cloudflare.com", "vasilii.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T17:09:26Z", "analysis_at": "2026-10-20T14:11:29Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-10-20T05:22:30Z", "expires": "2027-10-20T05:22:30Z", "updated": "2026-10-20T06:53:53Z", "first_seen": "2026-10-20T07:25:23Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "carla.ns.cloudflare.com" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "carla.ns.cloudflare.com" }, { "ttl": 21600, "type": "NS", "value": "vasilii.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3034::6815:52ef" }, { "ttl": 300, "type": "A", "value": "172.67.209.74" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::ac43:d14a" }, { "ttl": 300, "type": "A", "value": "104.21.82.239" } ], "dns_at": "2026-10-20T14:16:39Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.bswcore.com", "bswcore.com" ], "issuer": "Let's Encrypt / YE2", "serial": "680015b59d6ab2feccd06b439857eb662a7", "sha256": "aaa249705700ecd069b141f6e35fefb1d402c88481b8f514fcfd2839a5e30da9", "subject": "bswcore.com", "valid_to": "2027-01-18T04:33:49Z", "valid_from": "2026-10-20T04:33:50Z" }, "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "registrar_iana_id": "49", "registrar_url": "https://internet.gmo/", "created": "2026-10-20T05:22:30Z", "updated": "2026-10-20T06:53:53Z", "expires": "2027-10-20T05:22:30Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "carla.ns.cloudflare.com", "vasilii.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-10-19T15:00:00Z", "last changed": "2026-10-20T06:53:53Z", "registration": "2026-10-19T20:22:30Z", "registrar expiration": "2027-10-19T15:00:00Z", "last update of RDAP database": "2026-10-20T07:25:13Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T17:11:49Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "bswcore.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-22T17:10:25Z", "first": "2011-02-08T08:08:22Z", "changes": 1, "days_archived": 2, "scans_per_day": 0, "avg_page_bytes": 2363 }, "social_tags": { "title": "BSW", "robots": "all", "ogImage": "./platform/bsw/logo_144.png?2.2.1791954620742", "ogTitle": "BSW", "keywords": "BSW", "themeColor": "#ffffff", "description": "BSW", "ogDescription": "BSW" }, "trackers": { "requests": 14 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 5, "tls": 24, "wait": 301, "connect": 6, "download": 1 }, "response_ms": 337 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 8080 ] }, "carbon": { "bytes": 6390, "co2_grams": 0.0002, "cleaner_than": 81 }, "dns_server": { "ns": [ { "ip": "162.159.38.86", "host": "carla.ns.cloudflare.com" }, { "ip": "172.64.35.26", "host": "vasilii.ns.cloudflare.com" } ], "zone": "bswcore.com" }, "location": { "ip": "2606:4700:3034::6815:52ef", "asn": "13335", "org": "Cloudflare, Inc.", "city": "Toronto", "country": "CA" }, "ssl": { "issuer": "Let's Encrypt / YE2", "subject": "bswcore.com" }, "dns": { "A": [ "172.67.209.74", "104.21.82.239" ], "NS": [ "vasilii.ns.cloudflare.com", "carla.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"carla.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417987002, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "AAAA": [ "2606:4700:3030::ac43:d14a", "2606:4700:3034::6815:52ef" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "firewall": { "waf": "Cloudflare", "has_waf": true }, "get_ip": { "ip": "2606:4700:3030::ac43:d14a", "family": 6 }, "redirects": { "chain": [ "https://bswcore.com" ] }, "subdomains": { "count": 1, "subdomains": [ "h5-api.bswcore.com" ] }, "tech_stack": { "technologies": [ "Vue.js", "GSAP", "PubSubJS", "HSTS", "Cloudflare", "Vite", "Open Graph", "HTTP/3" ] }, "whois": { "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com", "created": "2026-10-20T05:22:30Z", "updated": "2026-10-20T06:53:53Z", "expires": "2027-10-20T05:22:30Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "carla.ns.cloudflare.com", "vasilii.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "cloudflare", "content-type": "text/html", "strict-transport-security": "max-age=31536000" } } } } ```