Is send-usdt-puce.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website on a free subdomain of a shared developer-hosting platform. Its page is titled "Transfer Trust Wallet" and carries only a few dozen characters of text. The domain name points to sending USDT stablecoin. The apparent purpose is a cryptocurrency transfer or wallet-interaction landing page. It shows no company, product description, or service terms to a visitor.

Scam/Impersonation Risk

Contradictory signals are present and serious. Multiple major security vendors currently flag the site as malicious, and a confirmed blacklist listing exists. That listing is decisive for the assessment and is not offset by any benign technical trait. The name and title combine a stablecoin-transfer theme with the "Trust Wallet" brand. The site presents no content that establishes any relationship with that brand, which is a recognised pattern in crypto credential and fund-diversion lures. This is a risk indication drawn from naming and content. No impersonation finding is confirmed, and no conflicting legal identities appear. The domain is days old and has almost no history, so there is no track record of legitimate operation. A sizeable volume of abuse reports exists against the shared hosting-provider address the site resolves to. These reports are attributed to shared infrastructure rather than to this site, so they were discounted and do not drive the conclusion. In automated testing the page made no external requests, attempted no wallet connection, and used no clipboard or hidden-form tricks. That absence of active exploitation in the tested runs does not outweigh the external detections. Evidence:

• Homepage: titled "Transfer Trust Wallet" and carries very little text, with a domain name built around sending USDT.
• Domain registered 2026-10-19 (~2 days old). The web archive holds 2 snapshots, 2026-10-19 to 2026-10-21, within a one-year tracked window.
• External reputation: 21 malicious and 1 suspicious detections, including three major security vendors. A confirmed blacklist is recorded.
• Behavioural testing: 3 of 3 runs completed with no external network calls, no wallet-provider interaction, and no cloaking.

Regulatory Verification Notes

The site discloses no operating company, license, registration number, or jurisdiction. The page has no legal, about, or terms content to evaluate. Its real-world operator is therefore unidentified, and ownership is opaque because the site sits on a subdomain of a shared hosting platform rather than an independently registered domain. A crypto transfer or wallet-style service would ordinarily be expected to identify a responsible entity and its regulatory standing. This gap is a verification limitation in its own right. Here it compounds the external threat detections instead of standing alone. No third-party broker or regulatory-registry record was matched, so no reputational signal of that kind exists either way. The technical profile is ordinary and says nothing about who operates the site: a basic domain-validated certificate and mainstream cloud hosting. Evidence:

• Homepage: no company name, license, registration number, contact route, or legal pages are shown.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by WR1 (domain-validated, DV), valid to 2026-11-27 with 36 days remaining.
• No third-party broker or regulatory match was found for this site.

What to Verify Next

The decisive question is whether the site belongs to any genuine wallet or payment provider. Anyone who reached this page through a link, message, or advertisement should trace that referrer and treat it as suspect. Any wallet or transfer service the user actually intends to use should be reached only through its officially published address, typed directly or taken from the provider's own app or verified channels. The listed security-vendor detections can be re-checked in the aggregator's current results to see whether they persist or have been cleared. If the site was expected to be a real service, its claimed operator should be asked to confirm, through an independent route, that they control it and hold any licensing the activity requires. Any prior interaction with the page should be reviewed for wallet approvals or entered secrets. Those approvals should be revoked and the secrets rotated if there is any doubt. Evidence:

• Homepage: gives no verifiable operator, so ownership must be established outside the site.
• External reputation: active malicious detections make a fresh re-check informative.
• Site naming: the title references a well-known wallet brand, so the official provider's own channels are the reference point.

Summary Verdict

The site is assessed as high risk. Confirmed blacklist listings and widespread malicious detections outweigh its limited positive technical traits. These traits are clean behavioural testing and standard encryption, and they provide no basis for confidence. Its newness, minimal content, and unidentified operator leave nothing to counter the external findings. No real-world legitimacy has been established.

Infrastructure Integrity

The site is delivered through a trusted CDN/WAF layer on Amazon-operated address space. All observed addresses are edge servers, and the origin server was not observable. This is a mitigating factor only. It reflects reputable delivery infrastructure, not a vetted operator, and edge-only visibility prevents independent hosting verification and can mask rapid content swaps. The protections do not offset the reputation risk.

Closing Assessment

The site should be treated as unsafe for any login, credential entry, wallet connection, or financial transfer. Read-only viewing is the only reasonable use, and nothing should be signed, approved, or sent through it. Any funds or wallet permissions already exposed to it should be protected immediately.

Signals weighed against the site

• AbuseIPDB: 88 reports on hosting IP 216.198.79.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.