---
title: "Is pay-bnb-wallet.vercel.app a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "pay-bnb-wallet.vercel.app"
verdict: "Critical Risk"
title: "Is pay-bnb-wallet.vercel.app a Scam? Trust Review, 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/pay-bnb-wallet.vercel.app
assessed: 2026-10-22
---

# Is pay-bnb-wallet.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** pay-bnb-wallet.vercel.app shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 13 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 81 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Web archive | Never archived (No public history of this site) | Watch |
| Certificate | Encrypted connection (Issued by WR1) | Noted |

## The page as captured


![Screenshot of the pay-bnb-wallet.vercel.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/pay-bnb-wallet.vercel.app/screenshots/first.png)

_What pay-bnb-wallet.vercel.app served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This site is a subdomain on a public application-hosting platform. Its name suggests a payment or wallet service for the BNB cryptocurrency ecosystem. At capture, the homepage returned only a "404: NOT_FOUND" error page with a very small amount of text. No product, brand, operator or service description was visible, so its apparent purpose is inferred from the domain name and not from anything the site states.


### Scam/Impersonation Risk

This is a **high-risk, cautionary finding**. The multi-engine reputation scan returned a substantial number of malicious detections, including from several tier-one security vendors, and it also returned suspicious detections. This is a confirmed **blacklist** condition and the decisive factor in the assessment. Reputation data also links the domain to known phishing activity. The name pairs "pay", "bnb" and "wallet" on a free platform subdomain. That is a pattern commonly used to attract people looking for cryptocurrency payment or wallet access, and it suggests the site may be posing as a payment or wallet service. No brand impersonation or conflicting legal identities were confirmed, because the site shows no content that could be compared. Behavioral testing found a **strong cloaking pattern**. The page content changed materially after simulated interaction, so what a scanner or first-time visitor sees may differ from what is later presented. A clipboard write was also detected during testing. In a wallet-themed context, a clipboard write is a recognised technique for swapping a copied payment address. This test alone does not prove that is happening here. Browser traffic was almost entirely directed to external hosts, although none of those hosts were non-whitelisted. Abuse reports exist against a hosting address the site shares. Those reports belong to the shared platform and are discounted, so they do not count against this site. Evidence:

- Homepage, multi-engine reputation scan: 13 malicious and 2 suspicious detections, including Fortinet, Kaspersky and Sophos.
- Behavioral testing of the homepage: strong cloaking (semantic difference 9.86, visual difference 7.84 after interaction); clipboard write detected; 70 external XHR requests and 12 external POSTs across 3 runs.
- Shared hosting address 64.29.17.3: 81 abuse reports, confidence score 0, classed as shared infrastructure and discounted.
- Homepage capture: HTTP 404 with a "404: NOT_FOUND" title and about 198 characters of text.

### Regulatory Verification Notes

The captured page has no legal, terms, privacy, about or contact content. It names no operating company, registration number or licence, so the site's real-world operator is not independently verified. That fits the pattern of a payment or wallet-themed service that handles value without any disclosed regulatory standing. This gap is a verification matter and not proof of fraud by itself, but it gives no mitigation against the confirmed reputational findings. No third-party broker or regulatory-database match was found. Absence from such a database is not a regulatory verdict. The valid certificate is domain-validated only. It confirms an encrypted connection and says nothing about who operates the site. Evidence:

- Homepage: no company name, licence, terms or privacy content on the captured page.
- Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27, with 36 days remaining.
- Hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).

### What to Verify Next

Nobody should enter credentials, connect a wallet, or send funds here. Any claim that this site is an official BNB-related payment or wallet service should be checked against the official channels of the brand it appears to reference. Those channels should be reached by typing their known addresses directly, not through links or messages that led to this site. If the site is part of a legitimate project, the operator should publish identifying and licensing information and should confirm the status of the security-vendor detections through the vendors' own review processes. Confirm any official support or contact channels independently and offline. Evidence:

- Homepage: no brand, operator or service description is available to check against.
- Reputation scan: detections from several vendors, which a legitimate operator can contest through those vendors.
- Behavioral testing: content changed after interaction, so a single visit does not show what the site actually serves.

### Summary Verdict

The authoritative assessment is critical, with elevated risk. The confirmed multi-vendor detections, the cloaking behavior, the phishing association and the absence of any verifiable identity outweigh the technically valid encryption and conventional hosting. The site should be treated as hostile until proven otherwise.


### Infrastructure Integrity

The site is served through a major cloud and edge platform. Its observed addresses all sit on that provider's network and belong to edge servers. The origin server was not observable, so independent verification of the hosting and the detection of rapid content changes are limited. This protective infrastructure and the valid certificate are mitigating factors only. They do not offset the reputational findings, and a free subdomain on a shared platform is an environment anyone can use. Evidence:

- Edge addresses 216.198.79.195, 216.198.79.3, 216.198.79.67 and 64.29.17.195, all within AS16509; no origin address candidates observed.

### Closing Assessment

Read-only viewing is the most that is advisable. Logins, credential entry, wallet connections and financial transactions should be avoided, and nothing should be downloaded or copied from the site.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)
- The page sent data to other domains many times while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_POSTS_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### Signals weighed against the site

- AbuseIPDB: 81 reports on hosting IP 64.29.17.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of pay-bnb-wallet.vercel.app.

- The request stayed on pay-bnb-wallet.vercel.app. It was not redirected to another domain. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.3 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 6 |
| Edge IP addresses | 6 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 13 flagged \| AbuseIPDB: 0% confidence, 81 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about pay-bnb-wallet.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [aml-wallet-scanner.vercel.app](https://trustsniffer.com/report/aml-wallet-scanner.vercel.app), a similar name (Critical Risk, 21/100)
- [trustwallet-secure-check.vercel.app](https://trustsniffer.com/report/trustwallet-secure-check.vercel.app), a similar name (Critical Risk, 5/100)
- [click-to-transsfer.vercel.app](https://trustsniffer.com/report/click-to-transsfer.vercel.app), a similar name (Critical Risk, 5/100)
- [bookmark-plum-zeta.vercel.app](https://trustsniffer.com/report/bookmark-plum-zeta.vercel.app), a similar name (Critical Risk, 2/100)
- [securywallets.vercel.app](https://trustsniffer.com/report/securywallets.vercel.app), a similar name (Critical Risk, 1/100)
- [coinwalletsolution.vercel.app](https://trustsniffer.com/report/coinwalletsolution.vercel.app), a similar name (Critical Risk, 0/100)
- [exclusive-openseamints.vercel.app](https://trustsniffer.com/report/exclusive-openseamints.vercel.app), a similar name (Critical Risk, 0/100)
- [monadapps.vercel.app](https://trustsniffer.com/report/monadapps.vercel.app), a similar name (Critical Risk, 0/100)
- [portal-moonshot-985.netlify.app](https://trustsniffer.com/report/portal-moonshot-985.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-zuc.netlify.app](https://trustsniffer.com/report/crypto-zuc.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24)
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)
- [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/pay-bnb-wallet.vercel.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/pay-bnb-wallet.vercel.app · assessed 2026-10-22.*