Security Scan Report: pay-network.vercel.app

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://pay-network.vercel.app/

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Fake 'Transfer Trust Wallet' USDT page on a vercel.app subdomain; an inline script with a Telegram bot token can forward entered wallet addresses and amounts to an attacker chat. Brand impersonation plus data exfiltration.

Risk Factors (4)
Impersonation of the 'Trust Wallet' brand on an unrelated vercel.app subdomain
Inline JavaScript exfiltrates captured input to a Telegram bot (attacker-controlled sink)
Crypto transfer interface soliciting wallet address and amount with no legitimate operator behind it
Unknown-age disposable subdomain on a shared hosting platform
Domain age information unavailable

Details

Page Title

Transfer Trust Wallet

Scan Type

public

Domain Name Analysis

You're looking at domain 'pay-network.vercel.app' on the application-focused generic top-level domain (.app) and includes subdomain 'pay-network'. Its registrable label 'vercel' stretches across 6 characters holding 2 vowels versus four consonants. Splitting it apart reveals two words: ver, cel. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pay-network.vercel.app/

Page Load Overview

2.01s
Total Load Time
187 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:127 chars
Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
78%
finance banking
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
94--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DAC1D675F8A21AA77043C1F66AE6751EBDA4E61BC10BD88C31ECC5D62FC3D5A8C93008

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:zdvWqO3uuau9WCWaJ9mkow/LqA36ReG/L2hBOdkKEBsuXDXOqVOwMP5tDfeLCm8:zdvWq8uuau9WCWaJAkow/L+Qj25tDfeg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6104:QAUETGgIgkEAAhlTFABjgAAFEwBEDVsgVAXYimGAgBWQCqgUA4AgBTDQFoDAEIgQAqgZFCBKCIAACACQBATLQAQShCgAxgAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818100000181800
Perceptual Hash:cc66cc9933993333
Difference Hash:303020000c32b20c
Wavelet Hash:38383c3c3c3c3c3c
Color Hash:#782d86

Other Hashes

Crop Resistant:303020000c32b20c

Scan History

Scan history not available

Unable to load historical scan data