bep20-usdt-one[.]vercel[.]app

This domain is flagged as a high-risk crypto drainer specializing in brand impersonation targeting Trust Wallet users. Analysis indicates the site employs deceptive transfer prompts to initiate unauthorized cryptocurrency transactions, specifically mimicking Trust Wallet's interface to harvest wallet credentials and drain funds from connected accounts. Infrastructure analysis reveals the domain bep20-usdt-one.vercel.app was registered on April 28, 2026, through Vercel Inc. and currently resolves to IP address 64.29.17.131, located in the United States under Vercel's hosting infrastructure. The domain appears on two security blocklists, including PhishDestroy and ScamSniffer, and is flagged by 1 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WR1), which while legitimate, does not mitigate the malicious intent of the domain. The page title 'Transfer Trust Wallet' directly aligns with the observed attack pattern of simulating wallet transfer processes to deceive victims. Mitigation requires immediate action from both users and security teams. Users should avoid interacting with this domain, particularly when prompted to connect wallets or input recovery phrases. Security teams are advised to block the domain and its resolving IP (64.29.17.131) at the network level, update endpoint protection rules to detect and prevent access, and monitor for related infrastructure (e.g., Vercel-hosted subdomains with similar naming patterns). Wallet providers should issue alerts to users about this specific impersonation campaign, emphasizing that legitimate wallet transfers never require entering recovery phrases or private keys on external sites. Additionally, monitoring for newly registered Vercel domains with cryptocurrency-related keywords may help preempt similar threats.