Is sendbscusdtbep20.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a subdomain on a public application-hosting platform, with a name suggesting a token-transfer tool for USDT on the BNB Smart Chain (BEP-20 standard). The captured homepage shows only a short "Deployment Unavailable" notice and returned a legal-restriction status code. It presents no products, branding, or operator information, so its commercial purpose and business model cannot be established from what the site displays.

Scam/Impersonation Risk

Contradictory signals are present. Several leading security vendors currently flag the domain as malicious, and the site is listed on external blacklists, which warrants a clearly cautionary stance. No brand impersonation and no conflicting legal identities were observed, and the detections do not specify a threat category. They therefore stand as confirmed reputational contradictions, not as a documented phishing or malware-distribution finding. The domain name itself, which references sending a stablecoin over a specific blockchain network, is typical of crypto-transfer lures. That is an inference from the name only, since the live page shows no such functionality. A large volume of abuse reports exists, but it is attached to a shared content-delivery IP address belonging to the hosting platform. It reflects activity by other tenants on that infrastructure and carries no weight against this site. In controlled testing the page made no external network calls, requested no wallet connection, and contained no hidden forms, clipboard manipulation, or cloaking. That reflects an inert placeholder at the time of capture and does not offset the external detections. A page that is inactive now could be redeployed with different content, as the live page is only a placeholder. Evidence:

• Homepage: the captured page carries the title "Deployment Unavailable" and only a few lines of text, with no product, brand, or contact content.
• Homepage: the capture returned an HTTP 451 status, which signals the content is unavailable for legal reasons.
• External reputation: multiple major security vendors flag the domain as malicious, and blacklist sources confirm the listing.
• Sandbox behavior: three of three test runs completed with zero external requests, no wallet-connect prompts, and no cloaking.

Regulatory Verification Notes

The captured page has no legal, terms, privacy, or about content, and no licensing or registration claims. Real-world operator identity therefore remains unverified, and nothing links the domain to an identifiable company or individual. No third-party broker-reputation match was found. This section carries no regulatory verdict. Transport encryption is valid but is only domain-validated, so it confirms nothing about who operates the site, and it does not offset the reputational findings. Evidence:

• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27 (about 36 days remaining).
• Homepage: no company name, licence number, or jurisdiction is stated on the captured page.
• Broker reputation: no match in the third-party broker dataset.

What to Verify Next

Any party considering interaction should first establish who operates the domain, through an independent route and not through the site itself. Any wallet address, payment instruction, or link originating from this domain should be confirmed with the claimed counterparty through a separate, trusted channel. The live site should be checked again later, because a placeholder can be replaced with transaction-capable content. The domain's status with the hosting platform should be confirmed, since the deployment is currently unavailable. Evidence:

• Homepage: the deployment-unavailable notice indicates the current content state is not representative of any intended service.
• External reputation: the detections are current, so any later content change should be re-assessed against fresh reputation data.
• Domain naming: the stablecoin and network wording in the hostname gives a counterparty-confirmation step a concrete anchor.

Summary Verdict

The available evidence supports an elevated-risk, clearly cautionary assessment. Confirmed external detections and blacklist listings are decisive and outweigh the neutral findings from the technical and behavioral checks. The site's operator identity is unverified, and no trustworthy legitimacy case can be built on the evidence at hand.

Infrastructure Integrity

The domain resolves entirely to edge nodes of a trusted content-delivery platform running on Amazon cloud infrastructure in the United States. The origin server is not observable, which limits independent hosting verification. This protective infrastructure is a mitigating factor only. It cannot offset the external reputation findings, and it provides no assurance about the content or operator behind the domain.

Closing Assessment

This domain should not be used for login, credential entry, or any financial or crypto-asset transaction. Contact should be limited to passive viewing at most, and no funds, tokens, or downloads should be sent to or accepted from it unless an independent, authoritative source later confirms its legitimacy.

Signals weighed against the site

• AbuseIPDB: 88 reports on hosting IP 216.198.79.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.