Security Scan: Transfer Trust Wallet

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/54c96f28-1731-417b-9e0a-954babff2f53 Domain and IP registration (RDAP)/api/v1/rdap/54c96f28-1731-417b-9e0a-954babff2f53How often this domain was scanned/api/v1/domain/stats/xinobep.vercel.app Scan history for this domain/api/v1/domain/history/xinobep.vercel.app?limit=15

This website contacted 5 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: http://xinobep.vercel.app/

Effective URL:

https://xinobep.vercel.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Wallet-drainer phishing page impersonating Trust Wallet on a vercel.app subdomain, flagged by threat intel and carrying a Telegram bot token for exfiltration. Do not connect a wallet.

Risk Factors (5)

Indicators of Compromise: primary-domain threat-intel match for wallet drainer / phishing

Brand impersonation of Trust Wallet on a non-official domain

Telegram bot token embedded in page script — potential exfiltration of victim data to a chat controlled by the operator

Held on an instant-publish shared hosting subdomain with unknown actual creation date

Network IDS flagged actor-abused cloud hosting service (vercel.app) in DNS and TLS SNI

Domain age information unavailable

Details

Page Title

Transfer Trust Wallet

Scan Type

public

Domain Name Analysis

Domain 'xinobep.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'xinobep'. The second-level label 'vercel' is 6 characters long with 2 vowels and 4 consonants. It segments into two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.37s

Total Load Time

218 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:43%

Script:Latin

Direction:ltr

Detection Details

Text Length:99 chars

Detector Agreement:67%

Website Classification

Primary Category

finance banking77% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

77%

cryptocurrency blockchain

33%

adult content

32%

healthcare medical

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	64.29.17.131Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	104.17.207.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	5	-	-