Is click-bnb-to-click.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a minimal single-page site on a shared hosting platform's free subdomain. Its page title reads "Transfer Trust Wallet", and it shows very little visible text. The name and title suggest a cryptocurrency wallet-transfer or "claim" funnel built around BNB and a well-known wallet brand. The page presents no products, company description, or documented service, and its apparent purpose is to steer visitors toward a wallet-related action.

Scam/Impersonation Risk

Contradictory signals are present and serious. Several established security vendors currently flag the site as malicious, and an external blacklist confirms the listing, which meets the standard for a confirmed blacklisting. The site's name pairs imperative "click" wording with a cryptocurrency reference, and its homepage title invokes a popular wallet brand. That combination is characteristic of wallet-transfer lures, which pressure visitors into moving assets or entering recovery details. The page itself offers no legitimate context to counter this reading. The sandbox did not observe wallet-drainer routines, clipboard tampering, hidden forms, or outbound data submissions. This is a mitigating observation, but it does not offset the external detections. Behavior shown during a short test session does not rule out a later content swap. A large number of abuse reports attach to the platform IP address the site resolves to. These apply to shared provider infrastructure used by many unrelated tenants and are discounted. They are not evidence about this site's own conduct. No conflicting legal identities appear, because the site discloses no entity names at all. Evidence:

• The homepage carries the title "Transfer Trust Wallet" and only a few dozen characters of visible text, with no product, service, or operator description.
• The domain was registered about two days before analysis (~0.005 years old), and the web archive holds a single snapshot, first and last seen on 2026-10-23, so there is no meaningful history.
• Multiple security vendors flag the site as malicious, and an external blacklist listing is confirmed.
• Behavioral testing across three successful runs showed no external requests, no wallet-connection attempts, and no cloaking.

Regulatory Verification Notes

The site discloses no legal entity, registered address, licence, or terms of service. The page content is too sparse to carry any legal or identity disclosure, so the real-world operator cannot be tied to any person or organisation, and any claim of wallet-service affiliation is unsupported. For a site inviting asset transfers, this governance and ownership opacity is a material concern. No third-party broker or regulatory-database entry matches the site, so no reputational context exists in either direction. The technical baseline is unremarkable: a valid but entry-level domain-validated certificate and mainstream cloud hosting. Both are available to anyone at no cost and say nothing about the operator's legitimacy. Evidence:

• Homepage: no company name, licence number, jurisdiction, contact details, or policy pages are present.
• Transport encryption: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27.
• Served from AS16509 (AMAZON-02 - Amazon.com, Inc.), US.
• No broker or regulatory match was found for the site.

What to Verify Next

Any wallet-related claim should be checked from the wallet provider's own official website, reached through a typed address or a trusted bookmark. The provider's official support channels should confirm whether it operates or endorses this page. Any request to "transfer", "claim", or "validate" assets should be treated as unverified until the provider confirms it independently. Recovery phrases and private keys must never be entered on any page reached this way. If the site was reached through a message, advertisement, or social post, the sender should be asked through a separate channel whether they sent it, and the message reported to the platform where it appeared. Evidence:

• Homepage: wallet-transfer wording with no accompanying identification of the operator.
• Hosting: the site sits on a shared platform subdomain, so the platform's abuse process is the appropriate reporting route.
• Threat intelligence: the active listings should be re-checked later to see whether they have been cleared.

Summary Verdict

The overall posture is high risk. External threat detections are decisive, and the site's newness, absent history, and lack of any identifiable operator leave nothing to offset them. Technical hygiene and quiet behavior in testing are acknowledged, but they do not change the conclusion.

Infrastructure Integrity

The site is served through a CDN/WAF layer on a major US cloud provider's network, and every observed address is an edge node. Nothing could be observed about the origin server. This is a mitigating factor only. Edge-only visibility prevents independent verification of the true hosting and can mask rapid content swaps, so the protective infrastructure cannot offset the reputational risk.

Closing Assessment

The site should not be used for login, wallet connection, asset transfers, or any payment or credential entry. At most, it may be viewed read-only from an isolated environment. Anyone who has already interacted with it should revoke wallet approvals, move funds to a fresh wallet if any seed phrase was exposed, and report the page to the hosting platform.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.