Is send-bep-01.netlify.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a minimal single-page website on a free Netlify-hosted subdomain. Its title is "Transfer Trust Wallet", and the page carries only a few lines of text. The hostname suggests a token-sending or wallet-transfer interface for the BEP network, but the page does not state a business model, operator, or product. Its apparent purpose is to prompt visitors to move digital assets or interact with a wallet-related workflow.

Scam/Impersonation Risk

Contradictory signals are present. Multiple independent security engines currently classify the site as malicious, including two tier-one vendors, and the site is on an external blacklist. This is decisive and outweighs every favourable technical attribute. The wallet-themed title, together with a disposable-style subdomain that closely resembles the hosting platform's own namespace, matches a pattern commonly used to lure holders of digital assets into authorising transfers. No conflicting legal identities were observed, and no brand impersonation or phishing page was confirmed in the captured content. The risk comes from the external threat detections and the nature of the offering, not from any identity inconsistency. In the behavioural sandbox the page made no external requests, no wallet-connection or drainer activity, no clipboard manipulation, and no hidden or credential-harvesting forms. That is a mitigating observation, not an assurance. The page showed no interaction surface in the captured runs, so malicious behaviour could be introduced later. The identity of the operator could not be connected to any real-world person or brand. Evidence:

• Homepage: titled "Transfer Trust Wallet" with only a few lines of visible text and no product, company, or support information.
• External reputation: 13 security engines flagged the domain as malicious and 1 as suspicious, including two tier-one vendors. The external blacklist status is confirmed and independent of the hosting provider's address.
• Sandbox behaviour: three successful runs with stable HTTP 200 responses, zero external network calls, zero console errors, and no wallet-drainer, clipboard-hijack, or cloaking behaviour.

Regulatory Verification Notes

The captured page contains no legal, terms, privacy, or about content. It states no licence, registration number, or corporate entity, so no regulatory standing can be inferred from the site. The page's total absence of identifying content means nothing on it can be used to establish who is offering a wallet-transfer service. The site is not a regulated financial service according to the evidence, and no third-party broker-reputation record was matched. The absence of a match is neutral and does not indicate legitimacy. Evidence:

• Homepage: no company name, licence reference, jurisdiction, or regulator named.
• Site structure: only the landing page was captured, with no legal or policy pages.
• Transport security: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV validation) to Netlify, Inc, valid to 2027-03-19. The certificate identifies the hosting platform, not the operator of this page.

What to Verify Next

Treat the site as unverified and do not rely on it for any asset movement. Any party that referred a user to this page (a message, advertisement, or social-media post) should be asked, through a channel they independently own, what the service is and who operates it. Any wallet or token-transfer service should be reached only through the official application or website of the wallet provider, typed or bookmarked directly, not through a link to a hosted subdomain. A user who has already interacted with the page should review and revoke token approvals on the relevant wallet and consider moving assets to a freshly created wallet. The security team of the hosting platform can be notified so the page can be reviewed. Evidence:

• External reputation: the current malicious classification is the primary reason independent confirmation of the operator is required.
• Homepage: the wallet-transfer framing leaves no on-page way to confirm who is behind the service.
• Hosting: the page is served from a shared platform subdomain, so the platform's abuse process is the available escalation route.

Summary Verdict

The available evidence points to an elevated-risk website. Current malicious classifications from independent security sources are decisive, and the unidentified operator and wallet-transfer theme leave nothing that counterbalances them. The technically clean page behaviour and valid transport security do not offset this.

Infrastructure Integrity

The site is served through AWS infrastructure (AS16509, Amazon.com, Inc., US) behind the Netlify platform. All four observed addresses are edge nodes, and no origin server was observable. Edge-only visibility prevents independent hosting verification and can mask rapid content swaps. The two abuse reports recorded against a provider address relate to shared platform infrastructure and have been discounted. The infrastructure is a mitigating factor only and is not evidence of legitimacy. It cannot offset the malicious detections. Evidence:

• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), with the edge addresses in the ARIN registry.
• Abuse reports: 2 reports against a shared Amazon Data Services Ireland content-delivery address, with a zero confidence score, so they carry no weight against this site.
• Transport security: valid OV certificate with roughly 143 days remaining.

Closing Assessment

Do not enter credentials, seed phrases, or private keys. Do not connect a wallet, approve token permissions, or transfer funds through this site. At most, view it passively from an isolated environment until the external threat classifications are cleared and the operator can be independently identified.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.