Security Scan Report: trustwallet-gules.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 1 domain to perform 27 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://trustwallet-gules.vercel.app/restorepage/24

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed phishing: fake Trust Wallet site on vercel.app harvesting 24-word recovery phrases. Multi-source phishing threat-intel match plus brand impersonation — never enter a seed phrase.

Risk Factors (6)
Seed-phrase (24-word mnemonic) harvesting form impersonating Trust Wallet
Brand impersonation of a different entity on an unofficial domain
Multi-source phishing threat-intel match on the primary domain
Free hosting-platform subdomain (vercel.app) with no attributable age or reputation
Unranked domain (not in Cisco Umbrella top 1M) claiming a major crypto brand
Network IDS alerts for abused cloud hosting service
Domain age information unavailable

Details

Page Title

Trust Wallet Help

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'trustwallet-gules.vercel.app' is registered with subdomain 'trustwallet-gules'. Count 6 characters in 'vercel' split between 2 vowels and four consonants. Word splitting yields two words: ver, cel. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Oo TRUST Market 24 Mnemonic Phrase Features Support — About Enter your 24-word recovery phrase to connect your wallet Word 1 Word 1 Word 5 Word 5 Word 9 Word 9 Word 13 Word 13 Word 17 W...

Page Load Overview

18.44s
Total Load Time
242 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:845 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain67% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
67%
technology software
55%
cryptocurrency
22%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
664.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
274--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13DF28375FA40D46FE9D38B9CB33A6F3914AEC577D62284E8E29DC6281382D74DB01D90

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:2fT9u8HXMbJKkMBpzEzQzozczszgzIzkzdzmz8zCz0zWzMz6zUz2zlz+z0zezQz3:YNI00QAkE4ZKQGQaAuw6pioSMV0OOFwl

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:37404:FhVMomJEBUCAEDEBkGVpCY2wFUzQJAyAAQCtCYQxOOIwlBgnFACBvFYMAmNACMECBUCUgB9YAQ4I2ERFiAKAACEDAyQL0hYb

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:89cfffffffffc3c3
Perceptual Hash:f9cb290bcb68ca68
Difference Hash:1b98606820419696
Wavelet Hash:b9ccfcfcfcbc0000
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data