Security Scan: Andex

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/89574dbc-02e0-418a-b8a2-aefa614af698 Domain and IP registration (RDAP)/api/v1/rdap/89574dbc-02e0-418a-b8a2-aefa614af698How often this domain was scanned/api/v1/domain/stats/andex.vercel.app Scan history for this domain/api/v1/domain/history/andex.vercel.app?limit=15

This website contacted 16 IPs in 1 country across 12 domains to perform 87 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://andex.vercel.app/terms-of-service

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Fake DEX on a Vercel subdomain whose own domain is threat-intel flagged as a wallet drainer; it reuses PancakeSwap/Uniswap copy and funnels visitors into wallet connection. Avoid connecting a wallet.

Risk Factors (5)

Primary domain flagged as a wallet drainer (phishing) by threat intelligence

Self-described 'DEX on MODE' on a free vercel.app subdomain with no verifiable corporate identity (legitimacy score 10/100)

Reuses marketing and interface text from unrelated DEX brands (PancakeSwap, Uniswap-via-Coinbase-Wallet modal)

IDS alerts indicating the vercel.app namespace is abused for actor infrastructure

Unranked domain (not in Cisco Umbrella top 1M) presenting a financial/crypto trading interface

Domain age information unavailable

Details

Page Title

Andex

Scan Type

public

Favicon Hash

MMH3: 1564962259

MD5: fca50d530ea4525965eb6e11edde9601

Domain Name Analysis

You're looking at domain 'andex.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'andex'. The core label 'vercel' covers 6 characters with two vowels and 4 consonants. Breaking it apart gives two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.50s

Total Load Time

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:26,782 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain96% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

96%

phishing scam

61%

technology software

61%

finance banking

40%

documentation technical

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
5	172.217.208.95Google · CDN	United States	AS15169Google LLC
5	104.20.30.246Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.20.42.156Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.26.12.125Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	142.251.14.97Google · CDN	United States	AS15169Google LLC
5	142.251.14.94Google · CDN	United States	AS15169Google LLC
5	104.26.3.169Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.20.35.94Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.66.147.126Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
87	16	-	-