Security Report: tonsquare-dapp.vercel.app - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c4851d34-b230-4b6c-bbef-412006298219 Domain and IP registration (RDAP)/api/v1/rdap/c4851d34-b230-4b6c-bbef-412006298219 Certificate Transparency/api/v1/ct/tonsquare-dapp.vercel.app How often this domain was scanned/api/v1/domain/stats/tonsquare-dapp.vercel.app Scan history for this domain/api/v1/domain/history/tonsquare-dapp.vercel.app?limit=15

This website contacted 52 IPs in 5 countries across 41 domains to perform 170 HTTP transactions. The main domain is tonsquare-dapp.vercel.app and was registered 26 years ago.

Submitted URL: https://tonsquare-dapp.vercel.app/en/access-key

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Vercel-hosted 'TONSquare' crypto access-key dApp flagged as phishing on its own domain, with 10 CRITICAL EtherHiding malware-exfiltration IDS alerts and a wallet-connect/mint flow. Avoid connecting a wallet.

Risk Factors (5)

Content-malware typed threat-intel match (phishing) on the primary domain

Repeated CRITICAL IDS alerts for EtherHiding malware exfiltration over blockchain infrastructure

Wallet-connect (TON/EVM) plus token-mint flow on an unranked, freshly-published vercel.app tenant — classic wallet-drainer surface

Excessive cross-domain redirect chain (5 redirects)

Unranked subdomain on a free shared hosting platform with unknown true creation date

Domain age information unavailable

Details

Page Title

Key Add-on Program | TONSquare

Scan Type

public

Favicon Hash

MMH3: -1422076444

MD5: b447603a78607519458bc96d5fe15ccf

Domain Name Analysis

The domain name 'tonsquare-dapp.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'tonsquare-dapp'. The core label 'vercel' covers 6 characters holding 2 vowels versus four consonants. Breaking it apart gives 2 words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.11s

Total Load Time

6.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:973 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency45% confidence

Type: spa

Method: structural

All Detected Categories

cryptocurrency

45%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	192.178.183.97Google · CDN	United States	AS15169Google LLC
3	34.160.81.0Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	185.199.108.133Fastly · CDN	United States	AS54113Fastly, Inc.
3	172.66.147.126Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	216.239.32.36Google · CDN	United States	AS15169Google LLC
3	104.20.35.94Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	45.196.29.102Cloudflare · CDN	Seychelles	AS13335Cloudflare, Inc.
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.26.2.107Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
170	52	-	-