Security Scan Report: ton-wallet-connect.vercel.app

Site favicon
Submitted: Sep 27, 2026, 12:50:45 AMCompleted: Sep 27, 2026, 12:52:23 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 75%

8
Risk Score

Anonymous Vercel subdomain offering only a 'Connect Wallet' button, flagged for phishing and pulling in many third-party wallet CDNs — a classic crypto-drainer shape. No forms, but do not connect a wallet.

Risk Factors (4)
Primary domain reported for phishing by threat intelligence
Wallet-connect page soliciting crypto wallet connection on a shared free hosting subdomain
No verifiable owner or official brand domain; unranked in Cisco Umbrella
IDS alerts for actor-abused cloud hosting and Telegram infrastructure
Domain age information unavailable

Details

Page Title

Ton Wallet Connect

Scan Type

public

Domain Name Analysis

The domain name 'ton-wallet-connect.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'ton-wallet-connect'. The registrable portion 'vercel' spans 6 characters split between two vowels and 4 consonants. It segments into two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ton-wallet-connect.vercel.app/

Page Load Overview

2.50s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:80 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software72% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
72%
finance banking
55%
documentation technical
37%
healthcare medical
35%
government public service
31%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1185.199.109.133Fastly · CDNUnited States
AS54113Fastly, Inc.
145.196.29.102Cloudflare · CDNSeychelles
AS13335Cloudflare, Inc.
1104.26.3.107Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
175.2.60.5Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1104.26.1.199Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.15.213Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.58.63Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
164.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4633--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T147A1E9A44A81110DB2238F43DDF1A1667257E86BFB015AEFE2026229D6C36D747F1717

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:T0J0aD5VKzOVKLTvm3x9CeIWEKhMvR9v1O5TVsENkzx5rLvK:faDrWgAvc+eIPKeRB1GZI9i

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4805:ACYQgJSMgAAIKBxAKQgAwoEAUhoOQgAKOAACJyQMMEAAAAgATIBHCKAAARAQgCAGUAEAkAMikABIIAAtDQABEBAggHIUBIQE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:cc3333cccc3333cc
Difference Hash:0000081010080000
Wavelet Hash:00000018fbf3f3f3
Color Hash:#783f3a

Other Hashes

Crop Resistant:0000081010080000

Scan History

Scan history not available

Unable to load historical scan data