Security Scan Report: pay-network.vercel.app

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://pay-network.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Crypto wallet-drainer page impersonating Trust Wallet on a free Vercel subdomain, matching a wallet-drainer threat-intel report and embedding a Telegram bot token used to exfiltrate data.

Risk Factors (6)
Brand impersonation of Trust Wallet on an unrelated hosting subdomain
Threat-intelligence match for wallet drainer / phishing on the primary domain
Telegram bot token embedded in inline script indicating data exfiltration to an attacker-controlled chat
Free Vercel subdomain tenant with unknown page creation date
Fake USDT transfer interface soliciting a destination address and amount
Unranked domain with no legitimate organisational footprint
Domain age information unavailable

Details

Page Title

Transfer Trust Wallet

Scan Type

public

Domain Name Analysis

Domain 'pay-network.vercel.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'pay-network'. The registrable portion 'vercel' spans 6 characters with 2 vowels and 4 consonants. Segmentation suggests 2 words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Send USDT Address or Domain Name 0x2639E1c2fDC917E50025f64d9k Paste A 3 Destination network % BNB smart chain v Amount 0 USDT Max ~ $0.00

Page Load Overview

0.36s
Total Load Time
187 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:127 chars
Detector Agreement:91%

All Detected Languages

🇺🇸en(90%)🇩🇪de(10%)

Website Classification

Primary Category

cryptocurrency blockchain78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
78%
finance banking
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
864.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
2151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
94--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16FC1C675F8A21AA77043C1F66AE6751EBDA4E61BC10BD88C71ECC5D62FC7C5A8D93008

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:3dvWqO3uuau9WCWaJ9mkow/LqA36ReG/L2hBOdkKEBsuXDXOqVOwMP5tDfeLCm8:3dvWq8uuau9WCWaJAkow/L+Qj25tDfeg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6089:EAADCCvACQFQgjBwp4kAAwAgGQAwEAYTg4ABYArCIAQAeAAnUNkEIbgSdCCAOQDCABKXkCAAhCAADAEUAKMCJMQhoEgXAQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818100000181800
Perceptual Hash:cc66cc9933993333
Difference Hash:303020000c32b20c
Wavelet Hash:38383c3c3c3c3c3c
Color Hash:38000000e00

Other Hashes

Crop Resistant:303020000c32b20c

Scan History

Scan history not available

Unable to load historical scan data