bep20-n847lznoz[.]vercel[.]app
“Transfer Trust Wallet”
bep20-n847lznoz.vercel.app — 클로킹됨 · 접근 가능. 브랜드 사칭: Trust Wallet; 사기 유형: Brand Impersonation. 증거 요약: VirusTotal 3/91 (alphaMountain.ai, Gridinsoft, LevelBlue); 1 external blocklist match (ScamSniffer); cloaking observed; PhishDestroy score 91/100. 등록기관: Vercel.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This domain is flagged as a high-risk brand impersonation of Trust Wallet, actively serving a page titled Transfer Trust Wallet as of July 12, 2026. The domain bep20-n847lznoz.vercel.app was registered on May 31, 2026, through Vercel Inc. and resolves to IP 216.198.79.195, hosted on Amazon.com infrastructure in the United States (AS16509). The SSL certificate is issued by Google Trust Services, and the page returns an HTTP 200 status, indicating the fraudulent content is currently accessible. Security blocklists from PhishDestroy and ScamSniffer have flagged this domain, and VirusTotal reports 3 out of 95 vendors identifying it as malicious. The Gridinsoft trust score is 0 out of 100, confirming the domain’s lack of credibility. The technologies detected include Vercel, jsDelivr, and HSTS, suggesting the attacker used a modern hosting stack to create a convincing clone of the Trust Wallet interface, likely designed to harvest cryptocurrency wallet credentials or seed phrases from visitors. No other domains associated with this campaign have been identified, and the nameservers are listed as not found, which may indicate a misconfiguration or deliberate obfuscation of DNS records. Analysts can confirm the threat is ongoing, as the domain remains active and the page loads without redirects or takedown notices. Defenders should block network access to 216.198.79.195 and the domain bep20-n847lznoz.vercel.app at perimeter security controls, including DNS filtering and proxy layers. For users who may have visited the page, immediate password rotation for related accounts and monitoring of cryptocurrency wallets for unauthorized transactions is recommended. The lack of additional intelligence on the attacker’s infrastructure or broader campaign scope means incidents involving this domain should be treated as isolated but credible threats, warranting full incident response procedures for any exposed credentials or financial data.
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 3 identified
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com 신뢰도 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 신뢰도 100%VirusTotal 분석
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of bep20-n847lznoz.vercel.app · checked May 31, 2026
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.