Is japan-usdt.vercel.app a scam? TrustSniffer's high-risk assessment: 21/100

japan-usdt.vercel.app
Download PDF Check another site How we score

Verdict

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

21 OUT OF 100
Critical Risk

japan-usdt.vercel.app shows high-risk / scam indicators.

Sensitive Interaction Risk Governance Risk

Assessed 2026-10-25 by automated analysis. Classification confidence 55%.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware engines2 flagged itVirusTotalRisk
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0% confidenceAbuseIPDB, 89 reports; shared hosting inflates reportsClear
Domain ageNot availableNo registration record was returnedNoted
CertificateEncrypted connectionIssued by WR1Noted
Hosted byAMAZON-02Server in USNoted

The page as captured

https://japan-usdt.vercel.app/
Screenshot of the japan-usdt.vercel.app homepage captured during the TrustSniffer assessment
What japan-usdt.vercel.app served when TrustSniffer captured it on 2026-10-25. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

Full analysis

Overview

Japan USDT is a single-page website, hosted as a subdomain on a shared application-hosting platform, that presents a Japanese-language offering of cash exchange for the USDT stablecoin in Tokyo's Azabu-Juban district. It also advertises remittance to Dubai over the TRON network. Its apparent purpose is to act as an over-the-counter crypto-to-cash and cross-border transfer service, with customers expected to contact the operator and settle offline or on-chain.

Scam/Impersonation Risk

Confirmed contradictory signals are present. The site has been flagged as malicious by multiple independent threat-intelligence sources and carries an external blacklist listing, which is the decisive negative in this assessment. The business model compounds the concern. Face-to-face USDT-for-cash exchange and remittance to Dubai are a recognised fraud archetype, because they combine irreversible on-chain transfers with physical cash handover and no recourse. The homepage names a specific street-level location in Tokyo but, within the material assessed, gives no verifiable operator identity to back the claim. The assessment found no brand impersonation, no conflicting legal entities, and no identity contradiction. A large body of abuse reports exists for the network address, but those reports belong to the shared hosting platform's address space and are discounted. They are not attributed to this site. In browser testing, the page made repeated outbound data submissions to third-party destinations, and most of them went to destinations outside the expected set. No wallet-drainer behaviour, clipboard manipulation, hidden forms, or content cloaking was observed. That narrows the technical threat but does not offset the reputational listing. Evidence:

  • Homepage: the title and content advertise USDT cash exchange in Azabu-Juban, Tokyo, and Dubai remittance over the TRON network.
  • Reputation: two threat-intelligence engines rated the site malicious and one rated it suspicious, which produced the external blacklist listing.
  • Homepage behaviour: 9 outbound POST requests were observed, 6 of them to non-whitelisted destinations, and external traffic dominated page activity.
  • Network address: 89 abuse reports apply to the shared hosting platform's address, were flagged as shared infrastructure, and carry a zero confidence score.

Regulatory Verification Notes

Nothing in the assessed material links the service to a financial regulator, a licensed virtual-asset service provider, or a registered money-transfer business. That matters here because cash-for-crypto exchange and international remittance are activities that normally require registration in Japan and in the UAE. No third-party broker record matched the site, so no external reputational signal on regulation exists either way. This is a verification gap and not proof of wrongdoing, but it sits on top of the confirmed threat listing. The registrant details behind the domain are incomplete, which is a case of ownership opacity. Operator identity is not independently established, so no real-world business or person can be tied to the site. The site is served over a valid but entry-level certificate and runs on a shared subdomain of a hosting platform. Those are signs of an easily created presence and do not demonstrate legitimacy. Evidence:

  • Homepage: the page presents a financial-style service without any regulatory registration reference being associated with it.
  • Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US) through the shared platform.
  • Transport encryption: TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27 with 32 days remaining.
  • Domain: registrant details are incomplete, and the site sits on a platform-owned subdomain and not on a dedicated domain.

What to Verify Next

Any dealings should be preceded by independent confirmation of whether the operator is registered to offer crypto exchange or remittance in Japan and in the UAE. That means checking the relevant financial-regulator and virtual-asset registers directly, not through links on the site. The claimed Tokyo location should be checked offline through a trusted route, since the homepage address cannot be taken as proof of presence. The official contact channels should be confirmed through an independent source before any message is sent or any wallet address is shared. Any wallet address supplied should also be checked against public on-chain abuse records before a transfer. Evidence:

  • Homepage: the Tokyo location and Dubai remittance claims are unsubstantiated within the assessed material.
  • Reputation: the existing threat listing means the operator's claims have to be proven first.
  • Homepage: the page gives no regulatory registration reference that can be checked against a public register.

Summary Verdict

The site is assessed at an elevated, high-risk posture. Confirmed adverse reputation signals converge with a fraud-prone service model and an unestablished operator identity. The technical hygiene that is present does not outweigh these signals.

Infrastructure Integrity

The site sits behind a content-delivery layer. All eight observed addresses are edge servers in the Amazon network, and no origin server was observable, so hosting cannot be independently verified. That limits scrutiny and can allow content to be swapped quickly. Because the platform is shared, its protections mitigate exposure only slightly and do not support the site's legitimacy. The network-level profile (a US registry, resolved DNS, a valid certificate chain, and consistently stable responses) is clean. It reflects the hosting platform and not the operator.

Closing Assessment

The site should be treated as read-only reference material at most. Account logins, credential entry, wallet connection, fund transfers, and cash handovers should be avoided until the operator is independently identified and the threat listing is cleared.

Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

01 External reputation

  • Several malware engines flagged this domain.External reputation rule:EXT_BLACKLIST_HIGH

02 Behaviour in a sandbox

  • Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox rule:BEHAV_EXTERNAL_RATIO_HIGH
  • The page exchanged network traffic with destinations TrustSniffer does not recognise.Behaviour in a sandbox rule:BEHAV_NONWHITELISTED_TRAFFIC
  • The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox rule:BEHAV_NONWHITELISTED_POSTS
  • The page sent data to other domains many times while it was open.Behaviour in a sandbox rule:BEHAV_EXTERNAL_POSTS_HEAVY

03 Registration and ownership

  • The public registration record for this domain is incomplete.Registration and ownership rule:KF_WHOIS_INCOMPLETE

Signals weighed against the site

  • AbuseIPDB: 89 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

Identity verification

StatusUNKNOWN
Identity score50/100
Identity verification confidence30%
  • AI page analysis unavailable (page captured; identity not AI-verified)

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of japan-usdt.vercel.app.

  • The request stayed on japan-usdt.vercel.app. It was not redirected to another domain. Clear
  • It is hosted on AMAZON-02, from a server in US. Noted

Domain intelligence

RegistrarNot available
HostingAMAZON-02 - Amazon.com, Inc., US
CountryUS
Server IP64.29.17.67
Name serversNot available
CDN / edge networkDetected
Resolved IP addresses8
Edge IP addresses8
Likely origin IP addresses0
SSL issuerWR1
SSL expiry2026-11-27
Domain ageNot available (no registration date was returned)
Domain expiryNot available
Archive first seenNot available
Archive snapshotsNot counted (archive lookup incomplete)
ReputationVirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 89 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about japan-usdt.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about japan-usdt.vercel.app

Is japan-usdt.vercel.app a scam?

TrustSniffer's assessment of japan-usdt.vercel.app found strong scam indicators. It scored 21 out of 100 on 2026-10-25, which is the critical-risk band. The specific signals are listed in the evidence above.

Is japan-usdt.vercel.app safe to use?

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

What is the trust score of japan-usdt.vercel.app?

japan-usdt.vercel.app scored 21 out of 100 on 2026-10-25, which places it in the critical-risk band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-25 · how we assess · report a mistake