Is send-usd-trust.netlify.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a minimal single-page website on a free Netlify application subdomain, titled "Transfer Trust Wallet". Its homepage carries only a line or two of text (under a hundred characters). The domain name ("send-usd-trust") and the title present it as a wallet or USD transfer service, so its apparent purpose is to steer visitors toward a funds-transfer or wallet-related action. The page shows no products, rates, fees, company description or operator, and nothing on it supports a legitimate business model.

Scam/Impersonation Risk

Material contradictions are present. An aggregated multi-engine scan flagged the site as malicious, with detections from several tier-one security vendors, and a separate external blacklist also lists it. The site is therefore blacklisted, and this finding decides the assessment. The brand-like wording in the name and title ("Trust", "Wallet", "Transfer") invites visitors to assume a connection to a recognizable wallet or payment service. The page offers nothing to substantiate such a connection, and no single brand is confirmed as impersonated. No conflicting legal identities were observed, because no legal identity is stated at all. The sandbox saw no external network calls, hidden forms, wallet-connection prompts, clipboard manipulation or cloaking. That behavior is consistent with a nearly empty page, and it cannot offset independent malicious detections. Such a page can be changed without notice into a credential-harvesting or funds-diversion lure. Evidence:

• Homepage: the title and a few words of text promote a wallet transfer service. The page gives no operator, pricing or product detail.
• Reputation: 19 security engines in an aggregated scan flagged the site as malicious, three of them tier-one vendors, and an external blacklist lists it.
• Domain provenance: the domain is about 89 days old, and the web archive holds a single snapshot, dated 2026-07-29.
• Sandbox: three successful runs with 0 external requests, 0 console errors and no cloaking.

Regulatory Verification Notes

The site gives no basis for treating it as a regulated or accountable financial service. The homepage has no terms, privacy policy, company name, registration number, licence reference or physical address, and no real-world operator can be linked to it. For a service implying money or wallet transfers, that absence is a significant disclosure gap, and here it sits alongside confirmed malicious detections. The transport-encryption certificate is an organization-validated certificate issued to the hosting platform, not to the site's operator. It shows that the platform is legitimate, not that the operator is. No broker-reputation profile matched the site, which supplies no counter-evidence. Evidence:

• Homepage: no legal, terms, privacy, licensing or contact disclosures are present.
• Transport encryption: the TLS certificate was issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV) to Netlify, Inc, valid to 2027-03-19.
• Hosting: the site is served from AS16509 (AMAZON-02, Amazon.com, Inc., US).

What to Verify Next

No entity is named, so there is nothing to look up in a licensing registry. If a message, advertisement or contact directed someone to this site, the sender's identity should be confirmed through an independent channel the sender did not supply, such as a published phone number or an app obtained directly from an official store. If any organization claims to operate this service, its authorization to handle customer funds should be checked with the relevant financial regulator's own register, not through links on this page. The referring message or link should also be kept and reported to the platform it came from. Evidence:

• Homepage: no named operator, licence or independent contact route exists to check.
• Domain: a roughly three-month-old domain with a single archive capture has no track record that could stand in for verification.
• Reputation: the confirmed malicious detections apply to this exact address, so no benign explanation is evident.

Summary Verdict

The site carries an elevated, clearly cautionary risk profile. Confirmed independent malicious listings dominate the assessment and outweigh every neutral or benign technical indicator. The site is new, anonymous and almost empty, and no evidence ties it to a real, accountable operator. Its legitimacy is unsupported, and sensitive interaction with it is not appropriate.

Infrastructure Integrity

The site is delivered through Amazon Web Services edge infrastructure on the Netlify hosting platform. Every observed address is an edge node, and the origin server is not visible. This is a mitigating factor only: the platform is mainstream, but it lets a free subdomain change content rapidly, and the edge-only view prevents independent hosting verification. Four abuse reports exist against a shared provider address in the same range. They reflect shared infrastructure and are not attributed to this site specifically, so they carry little weight beside the direct malicious detections.

Closing Assessment

The site should not be used for login, credential entry, seed-phrase or wallet-key disclosure, or any payment or transfer, and nothing should be downloaded from it. Anyone who has already interacted with it should treat any shared credentials as exposed, change them promptly, and contact their bank or payment provider about any transfers made.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.