Is sendusdt-2-psi.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page cryptocurrency transfer interface titled "Transfer Trust Wallet" and hosted as a subdomain of a public application-hosting platform. It shows only a "Send USDT" form with an "Address or Domain Name" field, a "Paste" shortcut, an "Amount" field with a "Max" button, an approximate dollar value and a "Next" button. Its apparent purpose is to guide a visitor through sending USDT to a destination they supply, and it presents no company, product description or explanatory content.

Scam/Impersonation Risk

Hard contradictions are present. The site is blacklisted by external threat intelligence. A large number of independent security engines classify it as malicious, including several tier-one vendors, and the aggregate result is strong enough to override every mitigating factor. No impersonation of a specific brand was confirmed, and no phishing form, login prompt or hidden form was detected. The page title does borrow the name of a well-known wallet product, which is a presentation choice a visitor could misread as an affiliation, but nothing on the page establishes one. A wallet-transfer screen that moves irreversible stablecoin value, offers no provenance, audit or institutional identity cues, and has been flagged by security vendors fits the profile of a value-diversion lure. Behavioural testing found no outbound requests, wallet-drainer routines, clipboard manipulation or cloaking. That is a mitigating observation about the page as rendered, not an exoneration. A single-field form can redirect funds through whichever destination a visitor is induced to paste. Reports of abuse recorded against a shared hosting IP were also noted. They are attributed to the hosting provider's shared infrastructure and were discounted, so they are not counted against this site. Evidence:

• Homepage: the only visible content is the "Send USDT" form, with no brand, operator, terms or support information.
• External reputation: 19 security engines rated the site malicious and 1 suspicious, including Fortinet, Kaspersky and Sophos. This triggered a critical threat override.
• Behavioural sandbox: 3 of 3 runs completed with 0 external requests, 0 wallet-drainer runs and 0 clipboard-hijack events, so no active exploit mechanism was observed on the rendered page.
• Abuse reports: 80 reports against a shared Vercel content-delivery IP, discounted as shared-infrastructure noise.

Regulatory Verification Notes

The site exposes no legal, identity, licensing or disclosure pages. It makes no regulatory claim and names no operating entity, so there is nothing to cross-check and no conflicting legal identities. Real-world operator identity remains unverified. A service that facilitates movement of customer funds would ordinarily identify its operator and the regime under which it operates. Ownership and governance opacity are present here as content gaps on the site. No third-party broker or regulatory-database match exists for the site, which neither supports nor contradicts it. The site runs on a free subdomain of a general-purpose hosting platform rather than a dedicated domain, which is consistent with a throwaway deployment rather than an institutional service. Evidence:

• Homepage: no operator name, registration number, licence or jurisdiction is stated, and no legal pages exist.
• Hosting infrastructure: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: the TLS certificate is issued by WR1 at domain-validated (DV) level and is valid to 2026-11-27. DV encryption confirms only control of the domain, not the operator's identity.
• Third-party broker reputation database: no match found.

What to Verify Next

No interaction involving credentials, wallet connections or fund transfers is supported by the evidence. Verification is only relevant for someone who was directed here by a third party. In that case, the instruction to send USDT should be confirmed through an independent, offline channel with the supposed counterparty, and not through any contact route supplied by this page or by the message that linked to it. The actual wallet or exchange product being referenced should be reached by typing its official address manually or through its official application. Any destination address or domain should be checked against the counterparty's own records before value is sent. Stablecoin transfers cannot be reversed. If funds were already sent, the sending wallet's provider and the relevant authorities should be contacted promptly. Evidence:

• Homepage: the form accepts any pasted address or domain, with no on-page confirmation of whom the recipient is.
• Homepage: the dollar-equivalent preview and "Max" control encourage fast, full-balance transfers with no stated safeguards.
• External reputation: the site's malicious classification is current and corroborated by multiple security vendors.

Summary Verdict

The available evidence supports a clearly high-risk posture. Corroborated external threat detections are decisive, and the page's thin, unattributed value-transfer design provides no legitimacy evidence to counter them. The site's apparent legitimacy cannot be established and its operator remains unverified.

Infrastructure Integrity

The site is served through Cloudflare's CDN and WAF, with a Vercel deployment behind it on Amazon-hosted address space (AS16509). All observed addresses belong to edge servers, and the origin server was not observable. These are mainstream, reputable providers, but they carry no weight as proof of legitimacy. Shared platforms of this kind host benign and malicious sites alike, so the infrastructure offers no meaningful offset to the external threat detections.

Closing Assessment

The site should be treated as unsafe for any financial action. No funds should be sent through it, and no credentials or wallet permissions should be entered on it. Anyone who arrived through an unsolicited link or message should disengage, avoid reuse of the link and report it to the platform or channel that supplied it.

Signals weighed against the site

• AbuseIPDB: 80 reports on hosting IP 64.29.17.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.