Is moneybank-liard.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page site, served from a free subdomain on a public application-hosting platform, whose only visible title is "Transfer Trust Wallet". The homepage holds almost no readable content, just a short fragment of text under a money-transfer and wallet-style label. Its apparent purpose is to present a funds-transfer or wallet-access service, but it gives a visitor no description of the operator, product, fees or terms.

Scam/Impersonation Risk

Multiple major security vendors currently flag this site as malicious, and it is confirmed blacklisted by external threat-intelligence sources. That detection is the decisive risk factor and is strong enough that no other positive signal offsets it. No conflicting legal identities or brand impersonation of a named institution were identified, and the evidence does not confirm phishing. The elevated risk therefore rests on the confirmed external detections, not on a proven impersonation. The branding is still a concern. A hostname built around "moneybank", paired with a page titled "Transfer Trust Wallet" and almost no explanatory content, matches the pattern of a lure aimed at people who expect to move money or connect a wallet. The site shows no trust-building content such as an operator name, product description or support route. A repeated pattern of abuse reports on the underlying shared hosting address was reviewed and discounted. That address is shared by many unrelated tenants, so the reports cannot be attributed to this site. In controlled browsing sessions the site made no external network calls, submitted no forms to outside parties, and showed no wallet-drainer, clipboard-hijacking or fingerprinting behaviour. These findings slightly reduce the likelihood of active on-page theft but do not cancel the external detections. Evidence:

• Homepage: the only content is a title reading "Transfer Trust Wallet" and a very short text fragment, with no operator, product or pricing information.
• External reputation: several major security vendors flag the site as malicious, and the detections confirm a blacklist listing.
• Behavioural sandbox on the homepage: all three runs loaded successfully with zero external requests, zero wallet-connection attempts and no clipboard writes.
• Shared-hosting abuse reports (84 on the shared provider address, last reported within the past few days) were discounted as infrastructure-level and are not attributed to this site.

Regulatory Verification Notes

The site is not a regulated entity and cites no licence, registration or regulator. The homepage has no legal, terms, privacy or about content, so nothing links it to a named company or to a jurisdiction. This is a disclosure gap for a service that presents itself as moving money, but on its own it is not evidence of fraud. The only active adverse evidence is the confirmed external blacklisting described above. No third-party broker-rating match was found, so no broker reputational signal applies either way. The transport layer is basic and carries no assurance about the operator. The certificate is domain-validated only and cannot confirm who runs the site. It also expires within about a month. Evidence:

• Homepage: no legal entity name, licence number, regulator reference, terms of service or privacy notice is published.
• Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27, with 32 days remaining. The validation level does not establish operator identity.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Third-party broker dataset: no matching entry.

What to Verify Next

Any contact with this site should be treated as unsafe until the external detections are explained and cleared. If a counterparty directed a person here, the request should be checked through an independent, offline route, such as a known phone number or a verified corporate website reached by typing the address directly, not through any link supplied. A claim to be a bank or a transfer service should be confirmed against the relevant financial regulator's public register. The register search should use the exact legal name the counterparty provides, since this site offers none. The security vendors' current verdicts should be re-checked before any reassessment. A compromised or abused site may be cleaned and delisted, but only a fresh clean result would change this posture. Evidence:

• Homepage: no named operator or licence exists to check against a registry, so the check must start from the counterparty's independently provided details.
• External reputation: the blacklist listing is current and should be re-queried before any change in stance.
• Contact channels: none are published on the homepage, so any support or contact route must be confirmed independently.

Summary Verdict

The overall posture is high-risk. Confirmed external malicious-site detections determine that outcome, and the page's thin, money-transfer-themed content gives no legitimate counterweight. The apparent technical hygiene and quiet on-page behaviour are mitigating observations only. They do not establish who operates the site or that it is safe, and the operator's real-world identity remains independently unverified.

Infrastructure Integrity

The site sits behind a content-delivery and web-application-firewall layer, and every observed address is an edge node, so the true origin server is not visible. This protective layer is a mitigating factor only and does not vouch for the site's content. The edge-only view also prevents independent verification of the underlying hosting and could mask a quick swap of the served content. The shared nature of these addresses is also why the abuse reports on them could not be attributed to this site.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any transfer of funds, and no files should be downloaded from it. Passive viewing is the only use consistent with the evidence. Anyone who has already entered credentials or authorized a transaction here should change those credentials and contact their financial institution without delay.

Signals weighed against the site

• AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.