Is livetrustwalletsnycs.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page customer-support helpdesk presented under the Trust Wallet name, a non-custodial cryptocurrency wallet brand. Its purpose is to collect support tickets through a form that asks for an email address, an environment (mobile app, browser extension or N/A) and an issue category, and the visitor is invited to submit a wallet address. The page earns nothing directly. Its apparent function is wallet-user support, but it runs on a free-tier subdomain of a general-purpose application hosting platform rather than on a brand-controlled domain.

Scam/Impersonation Risk

Contradictory signals are present and severe. Multiple independent external security engines currently flag the site as malicious, including one tier-one network-security vendor, and the site is blacklisted on that basis. A site of this age with no independent link to the brand it presents is a pattern consistent with support-desk impersonation of a wallet provider. The domain label combines the brand name with unrelated filler words, sits under a third-party hosting platform's shared namespace, and carries nothing that independently ties the page to the real wallet provider. The page itself shows no login form, seed-phrase request, payment request, wallet-connect prompt or clipboard manipulation, and the sandbox saw no wallet-drainer behaviour. That absence does not offset the external detections. The ticket categories are the kind a fraud operator would use to start a conversation with a distressed user: "Restoring my wallet", "Security Issues", "Unable to Receive/Send", "Pending/Stuck Transaction", and an unusual "Browser Extension Gas Fee Claims" entry. The harvest of recovery phrases or the redirection of funds would then happen off-page, in follow-up correspondence. The sandbox also recorded heavy external network activity relative to the page's own requests, repeated console errors across its runs, and a destination mismatch in the final navigation. The recipients of the external calls were benign, whitelisted services. Evidence:

• Homepage: a single support-ticket form capturing email, environment, issue type and, by implication, wallet details, with no seed-phrase or payment field in the captured content.
• Homepage: ticket categories cover wallet restoration, security issues, WalletConnect/dApps, swaps, staking and a "Gas Fee Claims" option, all referenced only as support topics.
• Domain: first observed 2026-10-04 (~15 days old), with 2 archive snapshots in 1 year tracked and no prior history.
• Sandbox: 3 of 3 runs completed, with 18 external XHR/POST calls to whitelisted destinations, 81 console errors, and a final-destination mismatch flagged.

Regulatory Verification Notes

The site claims no license, registration number, legal entity or regulator, and none of the captured content names a company, address or jurisdiction behind the support service. Governance transparency is therefore absent. The page presents itself as the support channel for a financial-technology product with no verifiable corporate counterpart behind it. This is a verification gap on its own and not proof of fraud, but here it coincides with confirmed external threat detections. No third-party broker or regulatory-watchlist entry matched this site, so no reputational signal arises from that source. The only regulatory-adjacent claim is the Trust Wallet name itself, and nothing independent confirms the site's right to use it. Evidence:

• Homepage: no company name, legal entity, license, registration number or physical address appears in the captured content.
• Homepage: the page identity ("Trust Wallet : Support") is the only brand claim, with no structured metadata, canonical reference or meta description to corroborate it.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), a general-purpose platform not tied to the claimed brand.
• Transport: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27 (38 days remaining).

What to Verify Next

Before any engagement, confirm through the wallet provider's officially published channels (the official website typed in manually, the verified in-app support entry, or its verified social accounts) whether this address is an authorised support endpoint. Check the destination against the provider's published list of official domains rather than any link supplied by a third party. Anyone who has already submitted a ticket should treat replies that ask for a recovery phrase, private key or remote-access session as hostile. Anyone who has already shared such material should move funds to a freshly created wallet from a clean device. Confirm that support contact reaches the user only through the official app or website. Evidence:

• Homepage: the support form invites wallet-related disclosures that a genuine provider would route through its own verified channels.
• Domain: a recent first appearance and a shared-platform namespace mean no long-standing record corroborates the brand claim.
• External detections: current malicious classifications mean the address cannot be cleared through its own page content.

Summary Verdict

The assessment is critical. The site presents a credible-looking wallet-support interface, but it is currently flagged by external threat detections, is very new, and cannot be connected to the brand it displays. Its content lacks the aggressive tactics typical of overt phishing kits, but the convergence of detection, age and unverified identity places it firmly in the high-risk category for any sensitive interaction.

Infrastructure Integrity

The site resolves to Amazon-hosted address space operated through Vercel's edge delivery platform, with all observed addresses being shared edge nodes and the origin server not observable. A valid TLS certificate and a mainstream, trusted provider are mitigating signals only. They confirm an encrypted connection and do not vouch for the operator. The numerous abuse reports against the sampled address attach to the shared provider IP, carry no confidence weight and are discounted, so they are not attributed to this site. Edge-only visibility also means content can be swapped rapidly without any change in infrastructure fingerprint.

Closing Assessment

The site should be treated as read-only at most. No account credentials, recovery phrases, private keys, wallet addresses or payments should be submitted through it. Wallet support should be pursued only through channels reached independently of this address.

Signals weighed against the site

• AbuseIPDB: 86 reports on hosting IP 216.198.79.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.