Is click-to-enjoy.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a minimal single-page website on a free, platform-provided subdomain. Its browser title reads "Transfer Trust Wallet", and the landing page carries only a short line of text, roughly one sentence. The title and subdomain name suggest a cryptocurrency wallet-transfer or "claim and enjoy" style entry point. The page offers no product description, operator name or business model, so its apparent purpose is to prompt a visitor into a wallet-related action.

Scam/Impersonation Risk

This site shows confirmed contradictory signals and warrants a clearly cautionary stance. Multiple independent security engines classify it as malicious, and the aggregate detection level is strong enough to trigger a confirmed blacklist condition. Several of the best-known security vendors are among the detecting engines, so the outcome does not rest on one outlier. The domain also appears in phishing-association data, and the evidence is consistent with a purpose-built credential or wallet-harvesting lure. The site was created only days before this assessment, and its web footprint consists of one archive capture. A freshly minted address using a "Trust Wallet"-style title and a wallet-transfer theme fits the profile of brand-themed phishing infrastructure. No specific brand impersonation or conflicting legal identity was confirmed, so the risk rests on the blacklist and detection evidence, not on identity inconsistency. A large number of abuse reports exist against the network address serving the site. They relate to a shared provider address used by many unrelated tenants, so they are discounted and not attributed to this site. A controlled browser test recorded no external requests, wallet-connection prompts, clipboard tampering or hidden forms, but a quiet page does not offset the reputation findings. Content can be swapped after the fact, and the page is a thin shell that could be switched to a malicious payload at any time. Evidence:

• Homepage: browser title "Transfer Trust Wallet", with about 89 characters of visible text and no product, company or support information.
• Reputation checks: 16 engines flagged the site as malicious and 1 as suspicious, including three tier-one vendors, which triggered the external kill-switch and a confirmed blacklist condition.
• Domain provenance: the domain is about 2 days old, first observed 2026-10-23, with 1 archive snapshot and 1 year tracked.
• Behavioral test: 3 of 3 sandbox runs succeeded with 0 external requests and 0 wallet-drainer or clipboard-hijack events.

Regulatory Verification Notes

The site presents no legal, licensing or ownership information that could support a financial or wallet-related service. No terms, privacy policy, company name, registration number or regulator reference was identified on the captured page. Disclosure is unclear, and both governance and ownership opacity are present. For a site inviting wallet-related interaction, this lack of accountable-operator information is material and compounds the reputational findings. The identity of the operator could not be independently connected to any real-world brand or person. No third-party broker or regulatory-database match was found, so no external regulatory standing exists to offset these concerns. The site holds a valid but entry-level certificate, which shows only that the connection is encrypted, not that the operator is trustworthy. Evidence:

• Homepage: no operator name, licence, registration number, legal terms or regulator reference is published.
• Identity assessment: the operator could not be tied to any real-world brand or person, and no broker or regulatory-database match exists.
• Transport security: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27 with 32 days remaining.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).

What to Verify Next

Any wallet, token or transfer-related request that originated from this address should be treated as unverified until independently confirmed. The party that directed a user to this page should be contacted through a separately sourced, offline channel to confirm they actually sent the link. Official wallet and exchange destinations should be reached only by manually typing a known address or using the official application, never through this page. If any wallet connection, seed phrase, signature approval or credential was already submitted here, the wallet should be treated as exposed, and funds should be moved to a freshly created wallet. Existing token approvals should be reviewed and revoked, and the incident should be reported to the relevant platform and authorities. Evidence:

• Homepage: it gives no official contact, support route or operator reference that could be used to confirm legitimacy.
• Security assessment: the verdict marks login, credential entry and financial interaction as unsafe uses.
• Reputation checks: the site's 16 malicious detections make any prior contact or link from it unreliable as a trust anchor.

Summary Verdict

The site is assessed as high risk. Confirmed external threat detections are decisive and outweigh the otherwise well-behaved technical profile. The available evidence does not support treating the site as a legitimate wallet or financial service, and its operator remains unidentified. The overall posture is clearly cautionary, with security-forward handling warranted for any sensitive interaction.

Infrastructure Integrity

The site runs on a major cloud provider's network (AS16509, Amazon) behind Vercel's content-delivery and edge platform, with six edge addresses observed and no origin server visible. The domain is a free subdomain on that platform's shared namespace, so the reputable provider reflects the host's standing and not the operator's. Infrastructure checks were otherwise healthy: the certificate is valid, responses were stable and the network profile is conventional. These factors are mitigating only and cannot offset the external threat detections. The edge-only visibility also prevents independent verification of what sits behind the platform and allows content to be changed quickly without a visible trace.

Closing Assessment

The site should be limited to read-only viewing at most, and preferably not visited at all. No wallet connection, credential entry, signature approval or financial action should be carried out through it. Anyone who received the link in a message or advertisement should discard it and report it to the platform where it appeared.

Signals weighed against the site

• AbuseIPDB: 90 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.