Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
bsc-verify.vercel.app shows high-risk / scam indicators.
| What this site appears to be | The page is a 'Deployment Unavailable' error screen that shows a request identifier and no service content, forms, or links. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 6 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 85 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a deployment-error placeholder hosted as a free subdomain on a mainstream application-hosting platform. Its only visible content is a "Deployment Unavailable" notice with a request identifier. The homepage has no branding, service description, forms, links, or monetization. It therefore offers no stated purpose or business model, and the only indication of intent is the hostname, which suggests a blockchain-related "verification" function.
Scam/Impersonation Risk
Contradictory signals are present. Several independent threat-intelligence engines currently flag the domain as malicious, and one top-tier security vendor is among them. This amounts to a confirmed blacklist listing and is the decisive finding. A hostname built around "verify" and a blockchain network is a naming pattern often used to lure users into wallet-verification or credential-capture flows. The homepage currently shows no such content, so this is a pattern concern, not an observed attack. Because the content is thin and the hosting is shared, it is also possible that the live content was taken down or swapped after a listing, so a later or alternate version may behave differently from the captured page. A reputation report against a shared edge address of the hosting provider was also seen. That report is attributed to the provider's shared infrastructure and is discounted, so it does not count against this site. No brand impersonation, phishing form, or conflicting legal identity was observed on the captured page, and these absences do not offset the confirmed detections.
- Homepage: a minimal error screen with a request identifier and no forms, links, or login prompts. No phishing form or brand imitation was observed.
- External reputation: 6 security engines classed the domain as malicious, including one tier-1 vendor, which triggered the confirmed blacklist condition.
- Hostname: a free platform-issued subdomain whose wording combines "verify" with a blockchain network name.
- Behavioral sandbox: 3 of 3 runs completed with no external network requests, no wallet-connection attempts, no clipboard manipulation, and no cloaking, so no active malicious behavior was captured on this page.
Regulatory Verification Notes
The site publishes no legal, terms, privacy, about, or contact pages. It claims no license, registration, or regulated status, and no operator or company name appears anywhere. The real-world operator therefore cannot be connected to any entity, and ownership remains opaque. No third-party broker or regulatory-reputation record matched the domain, so no regulatory standing can be inferred in either direction. The transport layer is technically sound: a valid certificate is in place. A domain-validated certificate only proves control of the hostname, not the operator's identity or intent.
- Homepage: contains no company name, license number, registration details, or jurisdiction statement.
- Hosting infrastructure: served from AS16509 (Amazon-02, US), with the origin address behind edge servers.
- Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27, which is a domain-control check only.
- Third-party broker reputation: no match found.
What to Verify Next
Any interaction should be preceded by establishing who actually operates this host and whether the promised service exists at all. The owner of the linked project or brand should be asked, through an independently sourced official channel, whether this hostname is theirs. If the site was reached through a message, advertisement, or social post, the origin of that referral should be treated as suspect and reported to the platform that carried it. Any wallet-verification or token-claim request tied to this hostname should be cross-checked against the official site of the relevant blockchain project, reached by typing the address manually rather than following a link. Official contact channels should be confirmed through independent means. The hosting provider's abuse-reporting process is the proper route for escalating any suspicious content.
- Homepage: the captured page offers no way to identify its owner or to contact them.
- Hosting: the subdomain sits on a shared platform where abuse reports go to the provider.
- Page capture: the platform returned an unavailability response, so the live service could not be reviewed.
- Reputation listing: remediation or a delisting would need to come from the operator, and none is indicated.
Summary Verdict
The overall posture is high risk. Confirmed multi-engine blacklist detections dominate the assessment, and the unverified operator identity gives no counterweight. The benign behavior of the captured page and its technically valid encryption do not outweigh the reputation evidence. Legitimacy is not supported, and the site should be classed as unsafe for sensitive interaction.
Infrastructure Integrity
The site runs on a major cloud network behind trusted CDN and edge infrastructure, and every observed address is an edge node. The origin server is not observable. This protective layer is a mitigating factor only. It does not offset the threat detections, and edge-only visibility makes it harder to independently confirm hosting and easier to swap content quickly.
Closing Assessment
Account login, credential entry, wallet connection, signing of any transaction, and financial interaction should be avoided on this hostname. At most, the page may be viewed passively. Anyone who has already interacted with it should treat any exposed credentials or wallet permissions as compromised, change passwords, and revoke wallet approvals.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The page has very little readable content.Page content
rule:PAGE_CONTENT_THIN
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 85 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bsc-verify.vercel.app.
- The request stayed on bsc-verify.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.67 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 6 flagged | AbuseIPDB: 0% confidence, 85 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bsc-verify.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.