Security Scan: Transfer Trust Wallet

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6937ed4a-7932-4514-a654-e08cf4caae36 Domain and IP registration (RDAP)/api/v1/rdap/6937ed4a-7932-4514-a654-e08cf4caae36 Certificate Transparency/api/v1/ct/pay-bnb-wallet.vercel.app How often this domain was scanned/api/v1/domain/stats/pay-bnb-wallet.vercel.app Scan history for this domain/api/v1/domain/history/pay-bnb-wallet.vercel.app?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is pay-bnb-wallet.vercel.app and was registered 14 years ago.

Submitted URL: https://pay-bnb-wallet.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Fake 'Transfer Trust Wallet' USDT transfer page on vercel.app matching a wallet-drainer threat-intel report; impersonates Trust Wallet and prompts users to send crypto to an attacker address. Do not interact.

Risk Factors (5)

Wallet-drainer IoC on the primary domain

Impersonation of Trust Wallet on a mismatched domain

Crypto transfer page designed to route funds to an attacker address

Subdomain on shared hosting platform with unknown actual creation date

Unranked domain (not in Cisco Umbrella top 1M)

Domain age information unavailable

Details

Page Title

Transfer Trust Wallet

Scan Type

public

Domain Name Analysis

The domain 'pay-bnb-wallet.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'pay-bnb-wallet'. Count 6 characters in 'vercel' holding two vowels versus 4 consonants. It segments into two words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.03s

Total Load Time

187 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:56%

Script:Latin

Direction:ltr

Detection Details

Text Length:127 chars

Detector Agreement:67%

Website Classification

Primary Category

suspicious phishing27% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

suspicious phishing

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	64.29.17.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	151.101.1.229Fastly · CDN	United States	AS54113Fastly, Inc.
2	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	151.101.65.229Fastly · CDN	United States	AS54113Fastly, Inc.
9	4	-	-