Security Scan Report: pay-network.vercel.app

Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 9 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://pay-network.vercel.app/

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

Crypto wallet-drainer page impersonating Trust Wallet on a vercel.app subdomain, flagged by threat intel, with a Telegram bot token exfiltrating data. Do not connect a wallet.

Risk Factors (5)
Wallet-drainer Indicator of Compromise on the primary domain
Brand impersonation of Trust Wallet on a non-official domain
Telegram bot token embedded in inline script for data exfiltration
Abused cloud-hosting subdomain with no reputation and unknown age
IDS alerts flagging the abused hosting service
Domain age information unavailable

Details

Page Title

Transfer Trust Wallet

Scan Type

public

Domain Name Analysis

The domain name 'pay-network.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'pay-network'. The core label 'vercel' covers 6 characters split between two vowels and 4 consonants. Splitting it apart reveals 2 words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Send USDT Address or Domain Name 0x2639E1c2fDC917E50025f64d9tPase 9 3 Destination network ® BNB smart chain v Amount 0 USDT Max ~ $0.00

Page Load Overview

0.46s
Total Load Time
187 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Text Length:127 chars
Detector Agreement:67%

Website Classification

Primary Category

cryptocurrency blockchain78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
78%
finance banking
72%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
364.29.17.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
94--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16FC1C675F8A21AA77043C1F66AE6751EBDA4E61BC10BD88C71ECC5D62FC7C5A8D93008

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:3dvWqO3uuau9WCWaJ9mkow/LqA36ReG/L2hBOdkKEBsuXDXOqVOwMP5tDfeLCm8:3dvWq8uuau9WCWaJAkow/L+Qj25tDfeg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6089:EAADCCvACQFQgjBwp4kAAwAgGQAwEAYTg4ABYArCIAQAeAAnUNkEIbgSdCCAOQDCABKXkCAAhCAADAEUAKMCJMQhoEgXAQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818100000181800
Perceptual Hash:cc66cc9933993333
Difference Hash:303020000c32b20c
Wavelet Hash:38383c3c3c3c3c3c
Color Hash:N/A

Other Hashes

Crop Resistant:303020000c32b20c

Scan History

Scan history not available

Unable to load historical scan data