Is click-bep-bep20.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, minimally populated landing page titled "Transfer Trust Wallet". It is served from a free subdomain on a shared application-hosting platform rather than from a branded domain. The page carries only a few lines of text. Its title and the token-standard wording in its address suggest a cryptocurrency wallet or token-transfer utility, and the apparent purpose is to prompt visitors to move digital assets or interact with a wallet. No product description, operator, or business model is presented.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is clearly cautionary. A substantial cluster of independent security engines currently flags the site as malicious, including three major endpoint-security vendors. This constitutes a confirmed blacklisting by third-party threat-intelligence sources. The page's wallet-and-transfer theme, together with its near-empty content and a disposable-style subdomain, matches the profile of crypto asset-transfer lures. These lures typically induce a visitor to approve transactions or surrender wallet access. The title also echoes the name of a widely used consumer wallet, which is consistent with brand-lookalike tactics, though no conflicting legal identities or explicit brand impersonation were confirmed on the page itself. Abuse reports exist against the shared platform IP address, but they attach to infrastructure used by many unrelated tenants and are discounted. They are not counted against this site. The site's own browser-level behaviour in testing was benign, with no external data posts, wallet-connection prompts, clipboard manipulation, or hidden forms. That absence does not offset the reputational detections, since a harmful payload or redirect can be swapped in after the page is first reviewed. Evidence:

• Homepage: titled "Transfer Trust Wallet", with a wallet-transfer theme and only a few lines of visible text.
• Reputation checks: multiple engines, including three major security vendors, rate the site malicious. This is the decisive factor in the assessment.
• Behavioural testing of the homepage: three successful runs showed no external requests, no wallet-connect or drainer activity, no clipboard writes, and no hidden or credential-posting forms.
• Shared platform IP: 87 abuse reports were filed against it, but they are attributed to shared provider infrastructure and discounted.

Regulatory Verification Notes

The page names no operating company, individual, jurisdiction, licence, registration number, or contact route. It also has no terms, privacy, or about content. For a site inviting asset transfers, this is a substantive content gap. It also leaves ownership opaque, and nothing on the page lets a visitor tie the service to an accountable legal entity. No third-party broker or regulatory-database match exists for the site. This reflects the absence of any reputational footprint, not an endorsement. The site is not shown to be authorised to handle customer assets in any jurisdiction. Technical hygiene is basic only. The site presents a valid but entry-level domain-validated certificate. Such certificates confirm control of the hostname, not the identity of its operator, so they carry no weight as legitimacy evidence. Evidence:

• Homepage: no company name, licence, registration number, address, or legal pages are shown.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US) on a shared Vercel platform address.
• Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27 with 32 days remaining.
• Reputation context: no broker-database entry was found for the site.

What to Verify Next

Verification should start from the position that the site is unproven and currently flagged. Anyone who received the link from a message, advertisement, or social post should trace it to its source and confirm that the claimed wallet provider actually published it. Access to the wallet service should come only from the provider's officially documented channel, reached by typing the address manually or through the provider's verified app listing, never through this page. Any claim of a licensed or regulated service should be checked directly in the relevant regulator's public register, and the site has not supplied the details needed to do so. Any wallet that has already interacted with the site should be reviewed with a token-approval checker, and unexpected permissions should be revoked. Evidence:

• Homepage: the wallet-transfer framing offers no verifiable provider identity to check against.
• Hosting: the address is a free subdomain on a shared platform, which gives no brand-ownership assurance.
• Reputation checks: current malicious detections make any independent review of the page's behaviour a precondition for further use.

Summary Verdict

The site presents an elevated-risk posture. Active security-vendor detections, an unidentified operator, and a wallet-transfer lure profile converge into a clearly adverse assessment. The benign behaviour observed in testing and the technically valid certificate do not outweigh these factors. Legitimacy and operator identity are unestablished, and the site should be treated as potentially malicious.

Infrastructure Integrity

The site is delivered through a trusted CDN/WAF layer on a major cloud provider's network. All observed addresses are edge nodes, and the origin server was not observable. This is a mitigating factor only, because it shows the delivery path is professionally run. It also means the hosting cannot be independently verified, and content can be changed quickly without any visible change in the infrastructure. The shared nature of the platform's addresses is the reason the abuse reports against them were discounted. It does not endorse this particular tenant.

Closing Assessment

Read-only inspection is the most that is advisable, and only from an isolated environment. Wallet connections, transaction approvals, seed-phrase or key entry, credential submission, and any payment should be avoided entirely. Anything already downloaded or authorised through this page should be treated as potentially compromised until reviewed.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.