MalwareTips
DANGEROUS

Crypto scam / wallet-drainer

Flagged on major browser safety blocklists as social engineering. Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.

Security Review

Is arcpay-tan.vercel.app legit or a scam?

Our verdict:Dangerous· 24/100

Newly created Vercel subdomain offering USDC swaps on Arc testnet, flagged by browser blocklists and lacking any verifiable business presence.

Top reasons
Domain registered today with no prior history.Browser blocklists flag the page for social engineering.No contact email, phone, or address listed anywhere on the site.
arcpay-tan.vercel.appScanned 2h ago
Post Facebook
0
Trust score
DANGEROUS
Score breakdown
Heuristics 0·MT 40
Screenshot of arcpay-tan.vercel.appSee the live page ↓
Category tags
cryptoweb3#crypto drainer75% MT confidence
Technical red flags (2)
Blacklisted by GoogleDomain is 0 days old
Warning signals (1)
Scam-network signals (35/100)
Positive signals (3)
Antivirus clearEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
0 days old
Registration date unknown
Intelligence
Suspicious
Moderate likelihood · 75% confidence

Website Preview

Screenshot of arcpay-tan.vercel.app
LIVE RENDER
arcpay-tan.vercel.app
1Professional design with consistent branding and layout

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

20
/ 100
Low visual risk

Visual red flags detected in the screenshot

The site appears to be a professionally designed landing page for a cryptocurrency payment protocol currently in a testnet phase; while it has some minor rendering issues with icons, it lacks typical scam indicators.

Visual risk20/100

What our vision model saw

5 signals

Professional design with consistent branding and layout

Prominent 'Connect Wallet' and 'Add Arc Testnet' buttons typical of Web3 applications

Missing icons or broken glyphs in the feature cards at the bottom

Explicitly states it is 'Live on Arc Testnet', indicating a development or testing environment

No immediate high-pressure urgency tactics or fake trust badges visible

Intelligence

Advanced threat intelligence
Analysis
Moderate scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The domain arcpay-tan.vercel.app was created today and hosts a landing page for a stablecoin payment tool on the Arc testnet. Our browser blocklist feeds flagged the page for social engineering, which is a strong automated signal. The site displays prominent wallet-connect buttons typical of crypto applications, yet provides no email, phone, or address for support. No business registration records exist for ArcPay or this deployment. While the page content matches descriptions of legitimate testnet demos, the combination of zero-age domain, blocklist hit, and missing contact details raises the risk that this is a wallet-drainer template deployed under the cover of a testnet project.
Full dossier
Analysis complete

Page Content

The page presents itself as ArcPay, a tool for sending USDC and swapping between USDC and EURC on the Arc blockchain testnet. It features prominent 'Connect Wallet' and 'Add Arc Testnet' buttons along with claims of instant finality and near-zero fees. No contact email, phone number, or postal address appears anywhere on the page. The body text explicitly states the service runs on testnet, which aligns with other developer-deployed demos on Vercel.

Infrastructure

The site is hosted on Vercel at IP 216.198.79.67 with a valid SSL certificate issued by Google Trust Services. The hosting IP shows zero abuse score but carries 13 prior abuse reports. External resources load from arc.network, docs.arc.network, and faucet.circle.com, consistent with a testnet environment. One redirect hop occurs within the same domain.

Domain History

The domain arcpay-tan.vercel.app is 0 days old. No registrar information is available due to the subdomain nature of the deployment. The evidence package confirms no business registration records exist for ArcPay or related projects on the Arc blockchain.

Web Reputation

Our antivirus network returned clean results with 0 of 92 engines flagging the page. However, browser blocklist feeds flagged it for social engineering. Web searches found no scam reports, complaints, or positive reviews for this specific subdomain. Similar *-tan.vercel.app deployments have been flagged as phishing in unrelated campaigns, though this particular instance shows no direct clone indicators.

What this means for you

Connecting a wallet to this page carries elevated risk because the domain is brand new, the page is blocked by major browser protections, and there is no verifiable operator behind the project. Even though the content appears to be a testnet demo, the lack of any established presence means funds could be at risk if the site is a drainer.

Risk Factors
5
  • Domain registered today with no prior history.
  • Browser blocklists flag the page for social engineering.
  • No contact email, phone, or address listed anywhere on the site.
  • No business registration records found for ArcPay or the project.
  • Vercel subdomains are commonly used for both legitimate testnet apps and phishing deployments.
Positive Signals
3
  • Zero detections across our antivirus network.
  • Page explicitly states it runs on Arc testnet rather than claiming mainnet activity.
  • Visual design appears professional with consistent branding.
AI Recommendation
Do not connect any wallet or approve transactions on this page. Wait for an established mainnet deployment with verifiable business contact details before interacting.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for arcpay-tan.vercel.app, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
No scam reports found
No complaints, no negative coverage turned up in our sweep.
Key findings
7 headline facts from open-web research
  • Domain arcpay-tan.vercel.app hosts a site titled 'ArcPay' with description 'Global Payments & Stablecoin Swap on Arc', offering USDC payments and USDC ↔ EURC swaps on Arc blockchain for ~$0.01 fees.
  • Arc is Circle's public testnet L1 blockchain launched October 2025, focused on stablecoin infrastructure including native swaps and USDC gas fees.
  • Multiple independent developers have deployed similar ArcPay apps on Vercel (e.g., arcpay-tau-five.vercel.app, sparkpay-app.vercel.app previously called ArcPay) as testnet demos for P2P USDC payments and stablecoin gateways.
  • No scam reports, complaints, reviews, or mentions of arcpay-tan.vercel.app found in web searches across general, Reddit, or X sources.
  • Vercel.app subdomains are frequently used for both legitimate testnet dApps and phishing sites; several other *-tan.vercel.app domains flagged as phishing in unrelated campaigns.
  • Related ArcPay projects include SDKs, payment gateways, and hackathon entries on Arc Network; one X post links a similar app at arcpay-tau-five.vercel.app.
  • Domain age is 0 days; no Trustpilot, ScamAdviser, or ScamDoc data available.
Research summary
Narrative write-up from our AI analyst, grounded on the facts above
We searched scam-report databases, consumer-review sites, and general web sources for arcpay-tan.vercel.app and didn't find scam reports or complaints. For a new or low-traffic site this is expected and is not by itself a sign of trust.

Threat Detection

Scam Network

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (2)
  • Zero contact info, crypto/gambling content, and the domain is only 0 days old — hallmark of a drainer farm.
  • Domain is only 0 days old and already carries multiple network-level red flags.
Linked signals (1)
Pattern · Contactless Crypto NEW Domain

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
This URL appears on threat lists

Detected threat categories: SOCIAL_ENGINEERING.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
ListedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗
Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 14 categories showed signals

We check every URL against 14 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Crypto Fraud
Crypto Fraud
Moderate likelihood
33/100
  • AI analyst tagged this as crypto fraud / wallet-drainer.
  • AI analyst categorised the site as crypto-themed.

Technical Details

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles2
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.
  • Links to 2 social profiles.

Domain & Encryption

Domain History
Age0 days old
RegistrarHidden
RegisteredUnknown
ExpiresUnknown
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WR1
ExpiresSep 26, 2026 (78d)
Self-signedNo
Hosting & Technology
HostingVercel, Inc
Server locationUS
Web serverVercel

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1308http://arcpay-tan.vercel.app/
  • 2200https://arcpay-tan.vercel.app/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file13
ISPVercel, Inc
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

docs.arc.networktestnet.arcscan.appfaucet.circle.comarc.networkdiscord.ggx.comcommunity.arc.network

What to do

Crypto scam / wallet-drainer indicators

The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.

  • Do not interact with arcpay-tan.vercel.app

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Never paste your seed phrase anywhere

    Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.

  • If you already connected a wallet

    Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.

  • Report the wallet and URL

    File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.

    Open

Safer Alternatives

Trying to handle crypto? Use a safe option instead

Dealing with crypto? Use a regulated, well-established exchange rather than an unknown site — and never connect your wallet or enter a seed phrase on a page you can't verify.

Coinbase

Publicly-listed, regulated US exchange.

Kraken

Long-established, regulated exchange.

Gemini

Regulated US exchange & custodian.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final Verdict

0
Trust / 100
Final Verdict·arcpay-tan.vercel.app
DANGEROUS

This is a brand-new Vercel subdomain hosting a testnet crypto payment page. The domain was registered today, carries a browser social-engineering block, and shows zero contact information or business records.

Do not connect any wallet or approve transactions on this page. Wait for an established mainnet deployment with verifiable business contact details before interacting.

AV engines
92
Domain age
0 days
Flagged
0
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags arcpay-tan.vercel.app as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — arcpay-tan.vercel.app scored 24/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. arcpay-tan.vercel.app presents a valid TLSv1.3 certificate issued by Google Trust Services · WR1, expiring in 78 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • arcpay-tan.vercel.app is 0 days old. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report arcpay-tan.vercel.app as clean.
  • Yes. The major browser blocklist feeds flagged arcpay-tan.vercel.app with the following threat categories: SOCIAL_ENGINEERING. This protects billions of browser users from visiting the site.
  • arcpay-tan.vercel.app resolves to an IP operated by Vercel, Inc in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on July 9, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around arcpay-tan.vercel.app have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
Recently scanned

Other Dangerous reports

Browse all reports
Dangeroustrust1
loyal-raccoon-022802.framer.app
32m ago
Read the review
Dangeroustrust1
facebook-seks-31.blogspot.com
34m ago
Read the review
Dangeroustrust1
fxtoptionexchange.com
35m ago
Read the review
Dangeroustrust1
caring-quicker-964590.framer.app
36m ago
Read the review
Dangeroustrust10
resolution-center-dispute.com
37m ago
Read the review
Dangeroustrust1
mtmskchrcmxtnsion.gitbook.io
37m ago
Read the review
Dangeroustrust1
facebook-linkedin.blogspot.com
37m ago
Read the review
Dangeroustrust24
litter.catbox.moe
38m ago
Read the review
Dangeroustrust16
m.lighterde.top
2h ago
Read the review
Dangeroustrust1
86365z.cc
2h ago
Read the review
Dangeroustrust1
lledgar-app.vip
2h ago
Read the review
Dangeroustrust1
cityinnparis.hostel.town
2h ago
Read the review
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.