Is jnisha.icu a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website presents itself as a "USDT Scanner" under a "Blockchain Security Protocol" banner. It claims to analyse a visitor's wallet in real time for flash USDT, fake tokens and suspicious transactions. The single-page tool guides the visitor through "Wallet Authentication" and "Complete Verification" steps. It names no operator and shows no pricing, so its business model is not disclosed. The wallet-verification flow is the only apparent purpose.

Scam/Impersonation Risk

Several independent contradictions are present, and together they make this a high-risk wallet-verification page. Multiple threat-intelligence sources currently flag the domain as malicious or suspicious, which amounts to a confirmed blacklist. No brand impersonation or conflicting legal identities were observed. The risk comes from the page's mechanics. The homepage displays "Scan Complete – No Threats Found" and "Verification Complete!" while the scan progress indicator still reads 0%, so the verdict is hard-coded rather than computed. Its headline statistics (47.2K scans today, 892 threats blocked, 99.9% accuracy) cannot be verified and look like decorative counters. The page tells the visitor to "complete the verification to secure your assets" after a fabricated clean result. This is the pattern of a wallet-authentication lure: it reassures the visitor first, then asks for a wallet connection or approval. The page does not say what that step costs, who receives it, or what service is delivered. Browser testing did not observe a wallet-connection prompt, drainer routine or clipboard manipulation. That absence does not make the flow safe, because the verification step is designed to lead to wallet interaction. Evidence:

• Homepage: a "No Threats Found" result and a "Verification Complete" message are shown before any scan has run, with the progress indicator at 0%.
• Homepage: the claims of 47.2K daily scans, 892 threats blocked and 99.9% accuracy have no supporting audit or source.
• Domain provenance: registered 2026-07-29 (~0.23 years old). The web archive holds 1 snapshot, captured 2026-08-01, with 1 year tracked, so there is no prior history.
• External reputation: 2 engines classify the domain as malicious and 4 as suspicious, and it also appears on an external blacklist.

Regulatory Verification Notes

The page describes no licensing, registration, audit or legal entity. It has no terms, privacy, about or contact pages. A wallet-security service that asks visitors to authenticate their wallet would normally identify its operator and its accountability channels. This is a verification gap and a content gap, but it is not the basis of the high-risk assessment. The blacklist hits and the deceptive scan behaviour are. The registration is shielded by a privacy service, which is an administrative detail rather than a finding. No third-party broker or regulator listing matches this site. Evidence:

• Homepage: no operator name, licence, registration number, jurisdiction or legal pages are published.
• Hosting: served from AS200019 (AlexHost, ALEXHOST SRL, Moldova-registered provider) on an IP geolocated to Russia, which is a geographic mismatch with the provider's registry.
• Transport encryption: TLS certificate issued by YE2 at Domain Validation level, valid to 2026-12-25. This confirms only that the connection is encrypted, not who runs the site.
• Registration: through Fewmoretaps OU d/b/a Trustname.com, with a privacy service (Perfect Privacy LLC) as the listed registrant.

What to Verify Next

Any need to use a USDT or flash-token checking service should be met through established, independently documented tools whose operator, audit history and support channels can be confirmed through sources outside this site. Wallet security checks should not be run through a page that returns results without scanning. If a link to this page arrived through a message, advertisement or social-media contact, that sender's identity should be confirmed through an independent route. Wallets that have interacted with this page should be reviewed for token approvals, and any unrecognised approvals should be revoked. The official support or contact channels of any related service should be confirmed through an independent route. Evidence:

• Homepage: the verification flow requests a wallet authentication step with no stated purpose, recipient or fee.
• Homepage: the page publishes no contact details, so no channel exists on the site for confirming the operator.

Summary Verdict

The assessment is critical and clearly cautionary. Confirmed threat-intelligence listings, a deceptive pre-populated scan result and a very recent domain with no history reinforce one another. The page is best regarded as a probable wallet-compromise lure rather than a genuine security service. Its valid encryption certificate and the absence of observed script-level wallet-drain behaviour do not offset this.

Infrastructure Integrity

The site resolves to a single address at a commercial hosting provider. No content delivery network or web application firewall was detected, so there is no protective layer in front of the server that could mitigate exposure. Heuristics flag a mismatch between the address's geography and its registry, and a young domain with a thin footprint. These are unconfirmed indicators and carry little weight beside the confirmed reputation findings.

Closing Assessment

The site should be limited to passive viewing, if visited at all. No wallet should be connected, no signature or approval granted, and no credentials or funds entered. Users who have already interacted with it should treat the associated wallet as potentially exposed and move assets to a fresh wallet if any unexpected approval was granted.