Security Scan: Phemex Dex Miner

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0da1ee5c-a8cb-4ba0-99f1-8319fdddad8c Domain and IP registration (RDAP)/api/v1/rdap/0da1ee5c-a8cb-4ba0-99f1-8319fdddad8cHow often this domain was scanned/api/v1/domain/stats/phemexdexminer.ltd Scan history for this domain/api/v1/domain/history/phemexdexminer.ltd?limit=15

This website contacted 15 IPs in 2 countries across 12 domains to perform 350 HTTP transactions. The main domain is phemexdexminer.ltd and was registered 1 year 3 months ago.

Submitted URL: https://phemexdexminer.ltd/

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Unauthorised Phemex-branded crypto 'dex miner' investment site with a username/password login form, implausible billion-dollar deposit claims, referral scheme and a phishing threat-intel hit. Do not enter credentials.

Risk Factors (5)

Brand impersonation: uses the Phemex exchange name on an unrelated domain while claiming a £/$ multi-billion deposit history

Primary domain reported in phishing threat intelligence

Multi-level referral scheme and implausible instant-withdrawal / billion-dollar volume claims

Suricata HIGH alerts for DNS queries to .to TLD (potentially bad traffic)

Domain age information unavailable

Details

Page Title

Phemex Dex Miner

Scan Type

public

Domain Name Analysis

Domain 'phemexdexminer.ltd' uses the .ltd top-level domain and has no subdomain. The second-level label 'phemexdexminer' is 14 characters long with 5 vowels and 9 consonants. Splitting it apart reveals four words: phe, mex, dex, miner. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

28.26s

Total Load Time

4.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:2,881 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking69% confidence

Type: webapp

Method: ml+structural

All Detected Categories

finance banking

69%

corporate business

65%

documentation technical

51%

education learning

48%

government public service

28%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
28	208.109.191.182	United States	AS398101GoDaddy.com, LLC
23	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	79.127.204.113Datacamp · CDN	Prague, Prague, Czech Republic	AS60068Datacamp Limited
23	104.21.72.238Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	104.20.42.169Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	172.66.161.212Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	172.67.187.213Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	108.138.26.38Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
23	185.152.64.17Datacamp · CDN	Prague, Prague, Czech Republic	AS60068Datacamp Limited
350	15	-	-