bsc-dl663k94z[.]vercel[.]app

This domain is flagged as a high-risk brand impersonation threat targeting Trust Wallet users. Analysis indicates the domain is designed to deceive victims into disclosing wallet credentials or transferring cryptocurrency under false pretenses, as evidenced by the page title 'Transfer Trust Wallet.' The threat type aligns with credential harvesting and fraudulent asset transfer schemes, common in cryptocurrency phishing campaigns. Infrastructure analysis reveals the domain bsc-dl663k94z.vercel.app was registered on May 22, 2026, through Vercel and resolves to the IP address 64.29.17.3, hosted in the United States under Vercel, Inc. The SSL certificate is issued by Google Trust Services (WR1). VirusTotal reports 1 out of 95 security vendors flagging the domain as malicious. The domain appears on 2 security blocklists, including PhishDestroy and ScamSniffer, and remains active as of this assessment. The creation date discrepancy suggests potential domain squatting or an error in registration records, though this does not diminish the immediate threat. Mitigation steps for this specific threat type include immediate blocking of the domain and IP 64.29.17.3 at the network perimeter. Organizations should deploy indicators of compromise (IOCs) to endpoint detection systems to prevent access. Users should be educated on recognizing brand impersonation tactics, particularly those involving cryptocurrency wallets, and advised to verify domain authenticity through official channels. Given the domain's association with Trust Wallet, wallet providers should issue alerts to users and monitor for unauthorized access attempts linked to this domain. Network traffic logs should be reviewed for connections to 64.29.17.3 or subdomains of vercel.app to identify potential prior exposure.