Is click-one-transfer.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This web address is a subdomain on a public application-hosting platform, and its only content is a "Deployment Unavailable" error screen with a platform request identifier. The page presents no products, pricing, forms, contact details or branding. The domain label evokes a money-transfer service, but nothing visible shows a business model or a purpose.

Scam/Impersonation Risk

Active contradictions are present, and this is the decisive element of the assessment. The address is blacklisted by external threat intelligence: a substantial number of independent security engines classify it as malicious, with a few more rating it suspicious. The detections include several well-known tier-one security vendors. The volume of detections alone triggers an automatic protective ceiling on trust. The content captured from the page does not explain the detections, since it is a bare error screen with no forms, no login surface, no wallet interaction and no external network activity. A deployment that is unavailable now may previously have served, or may later serve, different content, so the detections remain the controlling signal. The domain was first observed only days ago, and the platform serves it from a very short-lived, recently created tenant address, which is consistent with throwaway deployments. The page-level analysis also flags a close lookalike resemblance to the hosting platform's own domain. That resemblance is a naming-similarity observation, not a confirmed impersonation. No conflicting legal identities and no phishing form were observed. A large volume of abuse reports exists against a shared platform IP address, but these reports apply to infrastructure used by many unrelated tenants. They carry no weight against this site and are discounted. Evidence:

• Homepage: the only content is a "Deployment Unavailable" message and a platform request identifier. It has no business content, forms or external links.
• External reputation: 16 engines rate the site malicious and 2 suspicious. Three tier-one vendors are among those flagging it, and the Google Safe Browsing check did not flag it.
• Domain provenance: first observed in 2026 (~10 days old). The archive holds a single snapshot, dated 2026-10-09 (1 year tracked).
• Infrastructure reputation: 80 abuse reports against the shared platform IP 64.29.17.3 were attributed to shared infrastructure and discounted, with zero confidence against this site.

Regulatory Verification Notes

The captured page names no operating company, address, registration number or licence. It also contains no terms, privacy or about pages. The operator's real-world identity is therefore unverified, and the site shows ownership opacity. Because the page itself has no content, this is a lack of any disclosure to assess, not a disclosure that has been contradicted. No financial-services claim is made on the page, so no licensing statement can be tested. No third-party broker listing matched this domain. The site's transport encryption is valid but is only domain-validated. It proves control of the hostname, not the identity or trustworthiness of the operator. Evidence:

• Homepage: no legal entity, jurisdiction, licence or contact details are shown anywhere on the captured page.
• Transport encryption: the certificate was issued by WR1 (DV validation), valid to 2026-11-27, with 38 days remaining.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Broker reputation: no matching record was found in the third-party broker dataset.

What to Verify Next

Anyone who reached this address through an email, message, advertisement or payment request should independently confirm, through an official offline or previously known channel, that the sender actually published the link. Where a transfer or payment service is claimed, confirm its licensing status directly with the relevant financial regulator's public register rather than relying on anything shown on the site. Official support and contact channels should be established through the claimed organisation's independently known website. The hosting platform's abuse channel is the appropriate route to report the address if it was received unsolicited. Evidence:

• Homepage: the error screen gives no company or support route to confirm, so any verification must start outside the site.
• Domain label: the name suggests a transfer service, but no page supports that claim.
• Domain history: the address first appeared days ago, so no long-standing operating record exists to consult.

Summary Verdict

The overall posture is high-risk and clearly cautionary. Confirmed external threat detections drive that conclusion, and nothing else in the evidence offsets them. The operator's identity is unverified, the domain is brand new, and the page offers no substantive content that could build confidence.

Infrastructure Integrity

The site sits behind a trusted cloud and edge provider on Amazon-operated address space, with a family of edge IP addresses in the same block. No origin server address is visible. This protective layer is a mitigating factor only. It cannot offset the reputation risk, and edge-only visibility prevents independent verification of the real hosting and allows content to be swapped quickly.

Closing Assessment

Credentials, payment details, personal data and transfer instructions should not be entered here under any circumstances. Any link that led to this address should be treated as unsolicited until the sender is confirmed through an independent route. At most, the address should be viewed passively, and nothing should be downloaded from it.

Signals weighed against the site

• AbuseIPDB: 80 reports on hosting IP 64.29.17.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.