Security Scan Report: venus-testnet.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 1 country across 8 domains to perform 107 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://venus-testnet.vercel.app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake 'Venus Protocol' testnet on a Vercel subdomain that triggered 14 CRITICAL EtherHiding malware-exfiltration IDS alerts and contacts look-alike Binance streaming hosts. No forms, but malware behaviour — avoid.

Risk Factors (5)
Critical network IDS detection of EtherHiding malware exfiltration (14 hits)
Contact with look-alike Binance streaming domains, one unranked (binance.click)
DeFi brand (Venus Protocol) presented on a non-official, free Vercel subdomain
Third-party resource flagged in unverified threat-intel as vidar malware
Subdomain creation date unknown; platform age does not vouch for this page
Domain age information unavailable

Details

Page Title

Venus Protocol

Scan Type

public

Domain Name Analysis

You're looking at domain 'venus-testnet.vercel.app' on the application-focused generic top-level domain (.app) and includes subdomain 'venus-testnet'. Count 6 characters in 'vercel' with two vowels and four consonants. Word splitting yields 2 words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://venus-testnet.vercel.app/

Page Load Overview

7.66s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,859 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain56% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
56%
finance banking
54%
adult content
31%
technology software
30%
government public service
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1764.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
676.76.21.21Aws · CLOUDWalnut, California, United States
AS16509Amazon.com, Inc.
652.222.136.72Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
63.33.254.105Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6172.66.157.155Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.18.18.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
664.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
652.222.136.58Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10716--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18E344CFDA3E062F4E003C7F9E661A874B65B24FAEF53C954C3E91D50B69188C8C94C96

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:cNWj1v6gNZVl4TmV0U0Eh6mBcP0INxP4eFg7i3l101H9PvB9WAP1NXeQiXgQ8kkY:cNO1UmId9T6okjy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:247595:P2AgCOEgJCwpIQiKFwTBDRFJgEkgQAQAnIIGCKCCjtoirRCIVA5ZQJCyAANAoiEkXPICkIxiEFjggBDEwchYUyAZVC4IgFsG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff6c6c40404000ff
Perceptual Hash:c193afacac2ca993
Difference Hash:23c8c89c8cc841c0
Wavelet Hash:ff606e60444099ff
Color Hash:#2d5886

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data