send-secure-trustwallet-usdt-bip20.vercel.app: TrustSniffer assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page "Transfer Trust Wallet" landing page on a free subdomain of a developer hosting platform. Its hostname advertises a "secure" way to send USDT using the BIP20 token standard through the Trust Wallet brand. The page carries very little text and presents itself as a crypto-asset transfer utility. Its apparent purpose is to prompt visitors to move or authorise digital-asset transfers through a wallet-themed workflow.

Scam/Impersonation Risk

Hard contradictions are present, so this site is blacklisted by external reputation sources. A large cluster of independent security engines, including several top-tier vendors, currently classify the site as malicious. That convergence is decisive and is not offset by any technical hygiene signal. The hostname packs a well-known wallet brand, a stablecoin ticker, a token-standard label and the word "secure" into a throwaway subdomain. This is a recognised lure pattern for diverting crypto assets or harvesting wallet credentials. It is an inference from the naming and the reputation signals, not a confirmed observation of on-page behaviour. A prior phishing association has also been recorded for this hostname. No conflicting legal identities were found, and the page's few lines of text give no sign of a legitimate operator. Many abuse reports exist against the underlying IP address, but they belong to a large shared hosting provider's address space. They have been discounted and are not counted against this site. In the sandbox runs, the page made no external calls, showed no wallet-drainer or clipboard-hijacking behaviour, and used no hidden forms or cloaking. This lowers the likelihood of automated on-load theft but does not offset the reputation findings, because harm in this scenario typically occurs after a user is persuaded to act. Evidence:

• Homepage: titled "Transfer Trust Wallet", with only a few hundred characters of visible text and no company, product or support narrative.
• Hostname: names Trust Wallet, USDT and BIP20 on a shared platform subdomain, with no independent brand registration behind it.
• Domain provenance: about 17 days old, with a single archive snapshot (first and last seen 2026-10-08) and one year tracked, so there is no history to support trust.
• Sandbox behaviour: three successful runs showed no external requests, wallet-drainer activity or cloaking.

Regulatory Verification Notes

The page discloses no operator, legal entity, registration number, licence or regulator, and shows no terms, privacy or about content. Ownership and governance opacity are both present, and the real-world identity behind the site is unconfirmed. No third-party broker or regulatory-database match was found, so there is no licensing context to weigh. The site would in any case be handling digital-asset transfers and wallet-related activity, which are typically regulated or supervised functions. The absence of any disclosure is therefore a material gap here. The transport layer is a valid but entry-level, domain-validated certificate. That confirms an encrypted connection only and says nothing about who operates the site. Evidence:

• Homepage: contains no legal pages, company name, jurisdiction or regulatory reference.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27 (32 days remaining).
• Third-party broker intelligence: no match found.

What to Verify Next

Any request to move funds or open a wallet should be checked through the wallet provider's official application or its officially published support channels. The links and instructions on this page should not be used for that check. Anyone who has already visited the page and connected a wallet, entered a recovery phrase or authorised a transaction should treat that wallet as potentially exposed. They should move remaining assets to a newly generated wallet and review and revoke token approvals. The site can also be reported to the hosting platform's abuse process and to the wallet provider's brand-protection team. For completeness, a claim that this service is licensed should be confirmed with the relevant financial-services registry, as the page offers no basis for one. Evidence:

• Homepage: invites a wallet-themed USDT transfer without naming an accountable operator.
• Reputation: multiple security engines currently flag the site, so reporting through the platform's abuse channel is warranted.
• Sandbox: no wallet-connection prompt was triggered during automated runs, so exposure depends on user-initiated actions.

Summary Verdict

The site sits in a clearly high-risk posture. Multiple independent security sources agree that it is malicious, which outweighs the otherwise ordinary technical profile. Its brand-themed naming and the lack of any verifiable operator point toward a crypto-diversion lure rather than a legitimate service. Only passive, read-only observation is consistent with that posture.

Infrastructure Integrity

The site is delivered through a protective edge layer on major cloud infrastructure in the United States. All observed addresses are edge nodes, and no origin server could be observed. Edge-only visibility prevents independent hosting verification and can mask rapid content swaps. The platform's protections are a mitigating factor only. They cannot offset the reputational risk, and they say nothing about the intent of the site's operator.

Closing Assessment

The site should not be used for login, wallet connection, credential or recovery-phrase entry, or any transfer or payment, and nothing should be downloaded from it. Anyone who encounters it through a message or advertisement should leave the page and report the source.

Signals weighed against the site

• AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.