Is erc-trust-wallet.vercel.app safe? TrustSniffer's low-trust assessment: 26/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a recently created subdomain on a public application-hosting platform. Its name reads like a crypto-wallet service ("erc-trust-wallet"). When visited, it shows only a minimal "Deployment Unavailable" notice with a few dozen characters of text. It presents no products, services, company information or contact details, and its commercial purpose cannot be established from what it shows. The name pattern is typical of wallet-themed lure pages, which makes the site's intent an open question.

Scam/Impersonation Risk

Contradictory signals are present, and they are serious. Multiple independent security engines currently flag the site as malicious, including at least one tier-one security vendor. This amounts to a confirmed blacklist presence. The detections do not state a specific threat category, so the exact nature of the abuse (phishing, malware or wallet-draining) is unspecified. The site name pairs "wallet" and "trust" terms on a free hosting subdomain. That combination matches how lookalike pages for well-known wallet brands are typically built. No on-page content confirms an impersonation, and no conflicting legal entities appear, because the page carries no identity information at all. A large volume of abuse reports exists against the shared hosting-provider address the site resolves to. These reports are attributed to the shared platform, not to this site, so they are discounted and are not treated as evidence against it. The behavioral run was benign in its mechanics: no outbound data transfers, no wallet-connection prompts, no hidden forms and no clipboard manipulation. This does not offset the external detections, because a deployment that is currently disabled can be re-enabled with different content at any time. Evidence:

• Homepage: serves only a "Deployment Unavailable" notice, and the capture returned a legal-restriction-style status code instead of normal content.
• Reputation checks: three engines rate the domain malicious, including a tier-one vendor, and the aggregate blacklist condition is confirmed.
• Web archive: a single snapshot dated 2026-10-10, so the domain has only about 11 days of observable history.
• Browser sandbox: three runs completed with no external requests, no wallet-provider detection, and three console errors.

Regulatory Verification Notes

The site gives no regulatory footing to assess. The only page captured is a placeholder notice with no legal entity name, no terms or privacy pages, no licensing or registration references, and no jurisdiction statement. For a site whose name implies custody or wallet functionality, this absence is a significant content gap. It is a verification gap, not an independent finding of fraud. No third-party broker or regulator listing matches the site. The real-world operator cannot be connected to any brand or person from the available evidence, so no legitimacy can be inferred from the site's presentation. Evidence:

• Homepage: contains no company name, license number, address or legal documentation.
• Hosting: served from AS16509 (Amazon-02, US) under ARIN registry.
• Transport security: TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27. This confirms an encrypted connection, not an identity.

What to Verify Next

Any wallet, token or airdrop interaction that led to this address should be traced back to its origin and checked against the official channels of the wallet brand the name resembles. The brand's official website should be reached by typing it manually or from a trusted bookmark, never through a link that led here. If an official wallet or exchange requested a visit, its official support channel should confirm independently whether this address belongs to it. If the site re-enables content, the operator's legal identity and any claimed licences should be checked against the relevant public registries before any engagement. Anyone who already entered a seed phrase or credentials, or signed a transaction, should move assets to a new wallet and revoke token approvals promptly. Evidence:

• Domain name: pairs wallet and trust wording on a free platform subdomain, with no tie to any verifiable brand.
• Homepage: offers no official contact route that could be checked independently.
• Archive: only about 11 days of history exist, so no earlier legitimate use can be cited.

Summary Verdict

The overall posture is clearly cautionary and high-risk. Confirmed blacklist detections converge with a newly created, content-free, brand-evocative domain whose operator cannot be identified. These findings outweigh the few neutral technical signals, such as a valid certificate and clean sandbox behavior. The site is not suitable for sensitive interaction of any kind.

Infrastructure Integrity

The site sits behind the hosting platform's CDN/WAF layer, and all observed addresses are edge servers in Amazon's network (AS16509, US). The origin server was not observable. This provides standard availability protection and a valid certificate, but it prevents independent verification of where the content is actually hosted. It also allows content to be swapped quickly behind a stable address. This is a mitigating factor only and cannot offset the reputation findings.

Closing Assessment

The site should be treated as read-only at most. No wallet should be connected, no seed phrase or credentials entered, and no transactions signed or funds sent. Anything downloaded or reached through it should be considered untrusted. Reports of abuse should be directed to the hosting platform.

Signals weighed against the site

• AbuseIPDB: 85 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.