Is cryptoholic-usdt.vercel.app a scam? TrustSniffer's high-risk assessment: 16/100

Overview

This website is a single-purpose page titled "Receive USDT", served from a free subdomain of a developer hosting platform. It carries only a few sentences of text and presents itself as a destination for receiving USDT stablecoin. Its apparent purpose is to collect or direct cryptocurrency deposits, and it shows no recognisable brand, product catalogue, or service description.

Scam/Impersonation Risk

Contradictory signals are present, and they drive the cautionary posture of this report. Several independent threat-intelligence engines flag the domain as malicious or suspicious, and the site is blacklisted by external reputation sources. Prior phishing associations are also recorded against it. A page whose only function is to receive stablecoin transfers is a well-known pattern for deposit-redirection and address-substitution fraud. No evidence ties the page to a named brand or operator, so there is no basis to treat it as a legitimate payment endpoint. A large number of abuse reports exist against the Internet address the site resolves to. They are attributed to shared content-delivery infrastructure used by many unrelated tenants and are therefore discounted. They are not counted as evidence against this site. No conflicting legal identities were observed, so the concern here is the threat detections and the nature of the page, not an identity contradiction. Evidence:

• The receive page (titled "Receive USDT") is flagged as malicious or suspicious by multiple independent security engines (3 malicious, 1 suspicious detections), and external blacklist status is confirmed.
• The receive page's sole stated function is accepting USDT deposits, with no accompanying business context.
• Abuse reports (107) apply to a shared CDN edge address operated by the hosting platform and are treated as discounted shared-infrastructure noise.

Regulatory Verification Notes

The captured page contains no company name, licence, registration number, terms, privacy notice, or contact channel, so there is nothing on the site against which to check regulatory standing. Because the site is a subdomain of a shared hosting platform, no independent domain registrant identity is attached to it. This is ownership opacity, not an identity contradiction. A service that accepts cryptocurrency deposits would normally be expected to identify its operator and regulatory status. No third-party broker or regulator record matched this domain, and the absence of a match is not a verdict. The only positive technical facts are a currently valid transport-encryption certificate and a mainstream hosting provider. Neither establishes who operates the site. Evidence:

• The Receive USDT page lists no legal entity, licence, or registration details.
• Served from AS16509 (AMAZON-02, Amazon.com, Inc., US) via the platform's CDN edge.
• TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27, which confirms encryption but not operator identity.

What to Verify Next

Any party considering a transfer should first establish, through an independent channel, who is asking for the funds and why. That means obtaining the destination wallet address directly from a known, authenticated counterparty, not from this page. Both the counterparty's claimed organisation and its licensing status should be confirmed with the relevant financial regulator's public register. The official contact channels of that organisation should be confirmed offline. Any request that directed a payer to this page should be treated as unverified until that confirmation is complete. Evidence:

• The Receive USDT page gives no operator, regulator, or support information that could be used for verification.
• The page is hosted on a shared platform subdomain that cannot be linked to an organisation by its address alone.

Summary Verdict

The overall posture is high-risk. Confirmed external threat detections outweigh the site's minimal technical hygiene, and the page's nature compounds the concern. Legitimacy cannot be inferred, and the real-world operator is unidentified.

Infrastructure Integrity

The site is served entirely through a content-delivery network on Amazon-backed infrastructure run by the Vercel hosting platform. All observed addresses are edge nodes, and the true origin server could not be observed. This is a mitigating factor for availability and basic resilience only. Edge-only visibility also prevents independent hosting verification and allows content to be swapped quickly. Protective infrastructure cannot offset the reputation risk.

Closing Assessment

Interaction should be limited to read-only viewing at most. No sign-in, credential entry, wallet connection, or fund transfer should take place through this site. Any funds already sent to an address obtained here should be reported to the relevant exchange and local authorities without delay.

Signals weighed against the site

• AbuseIPDB: 107 reports on hosting IP 216.198.79.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.