Is safetrust-sigma.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page web property published on a free subdomain of a developer application-hosting platform. Its branding uses trust-and-safety language, and its homepage loads successfully with a modest amount of text content. The visible content did not establish a clear product, service or business model, so its apparent purpose is unclear. The page also runs a large amount of script-driven activity and pulls in many third-party resources.

Scam/Impersonation Risk

This assessment is clearly cautionary. Contradictory signals are present, and they come from the site's external reputation rather than from its content. A confirmed blacklist listing exists, supported by several independent reputation sources. Multiple engines flag the site as malicious, including two tier-one security engines, and a further engine marks it as suspicious. This convergence is decisive, and hosting protections cannot offset it. Reports of abusive activity against one of the site's edge addresses were also reviewed. They apply to a shared provider-operated address used by many unrelated tenants, so they are discounted as attributable evidence and do not drive the verdict. No brand impersonation and no conflicting legal identities were observed, and no wallet-connection, clipboard-manipulation, hidden-form or credential-forwarding behaviour was triggered in the sandbox. Page behaviour was nonetheless unusual. A large share of network activity went to external origins, including repeated outbound data submissions, and the page structure changed substantially after interaction. These behaviours are consistent with a heavily script-driven page but do not show intent on their own. The reputation listing is what makes interaction unsafe. Evidence:

• Homepage: independent threat-intelligence sources currently list the site as malicious, which constitutes a confirmed blacklist hit.
• Homepage sandbox runs: most observed requests went to external origins, with repeated outbound submissions, but none went to non-whitelisted destinations.
• Homepage after interaction: the page structure changed extensively, and several console errors were logged. No cloaking was detected.
• Hosting edge: abuse reports tied to a shared content-delivery address were discounted because they relate to the provider's infrastructure and not to this site specifically.

Regulatory Verification Notes

The homepage text gave no verifiable company name, licence or registration reference, and its disclosure state is unclear. The site's real-world operator has not been independently connected to any brand or person, and ownership opacity applies. No reputational match from a broker-intelligence source was found, so there is nothing to weigh in either direction there. The site runs on a free platform subdomain, not on a domain registered to a named organisation. That provides no corporate identity anchor. The technical foundation is ordinary: the transport certificate is valid and issued by a recognised authority, and hosting sits with a mainstream cloud provider. These facts are neutral. Neither the encryption nor the hosting says anything about the operator's legitimacy. Evidence:

• Homepage: no named legal entity, licence number or registration reference was identified in the captured text.
• Site hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by WR1 (domain-validated only), valid to 2026-11-27.
• Domain structure: the site is a subdomain of a shared hosting platform, not an independently registered brand domain.

What to Verify Next

Verification should start with whoever claims to operate the site. Any named entity should be checked against the official company or financial-services registry of its stated jurisdiction, using details obtained independently of this site. If the site claims to represent a brand, that brand's official website, reached through an independent route, should confirm that the property is genuinely theirs. Official support and contact channels should be confirmed the same way. The site's status should also be re-checked with the relevant threat-intelligence sources after the owner has reported remediation, and before any change in handling. The site has no verified operator, so no transaction or data exchange should be attempted before a registry check succeeds. Evidence:

• Homepage: no registry-checkable entity name or licence reference was published.
• Reputation sources: current malicious listings are the principal reason re-checking after remediation is the correct gate.
• Platform subdomain: the hosting platform's abuse process is a relevant channel for reporting or confirming misuse.

Summary Verdict

The site carries an elevated risk posture. Confirmed adverse reputation from multiple independent sources outweighs its technically orderly encryption and hosting. Its operator has not been independently identified. The evidence does not prove deliberate fraud, but it does establish that the site is unsafe for sensitive interaction.

Infrastructure Integrity

The site is delivered through a content-delivery and web-application-firewall layer on Amazon-operated infrastructure in the United States. All six observed addresses are edge servers, and the origin server was not observable. This edge-only visibility limits independent hosting verification and can mask rapid content changes. The edge layer mitigates exposure to denial-of-service attacks, but it is no evidence of legitimacy and cannot offset the adverse reputation findings.

Closing Assessment

Interaction should be limited to passive, read-only viewing, if it occurs at all. Logging in, entering credentials, and any payment or financial activity should be avoided. Nothing should be downloaded from the site. Handling should be reconsidered only after the listings are cleared and the operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.