Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
sendusdt-2.vercel.app shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 17 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 108 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a single-page site hosted on a subdomain of a public application-hosting platform. Its page title is "Transfer Trust Wallet", and its address suggests a stablecoin (USDT) transfer function. A visitor sees a very short landing page with almost no descriptive text, so the site's purpose is inferred from its naming and title and not stated. That pattern fits a wallet-transfer or payment-redirect front end, not an established product with a visible operator.
Scam/Impersonation Risk
Contradictory signals are present and decisive. Several established security vendors currently classify the site as malicious, and it is confirmed as blacklisted by external reputation sources. That level of agreement is serious enough to override every mitigating signal in the record. No conflicting legal identities and no brand impersonation were observed, and the page analysis did not confirm phishing content. The risk therefore rests on the external blacklisting. The wallet-and-transfer framing makes that blacklisting more concerning, because such pages are commonly used to capture funds or credentials. The automated browsing sessions found no outbound data transmission, wallet-draining behaviour, clipboard manipulation, or hidden forms. This is a mildly favourable behavioural result, but it reflects a thin page and cannot offset the external detections. Login, credential entry, and any financial interaction should be treated as unsafe. Evidence:
- Homepage: the title reads "Transfer Trust Wallet" and carries only a few lines of text, with no product description, operator name, or support details.
- Reputation: multiple major security vendors flag the address as malicious, which triggered the strictest cap on the assessment.
- Behavioural testing: three successful sessions on the homepage showed no external requests, wallet-provider hooks, clipboard writes, or cloaking.
- The aggregate IP abuse reports are attributed to shared platform infrastructure, so they were discounted as evidence against this specific site.
Regulatory Verification Notes
The site presents no legal pages, company name, licence, or registration number. Its only page is a minimal homepage, so there is no terms, privacy, or about content to assess. The site also gives no way to independently connect it to a real-world business or person. For a page that implies moving digital-asset value, that is a significant disclosure gap. On its own it would be a verification matter, but here it compounds the external threat findings. No third-party broker or regulatory-database profile was matched, so there is no reputational context beyond the security detections already noted. Evidence:
- Homepage: no legal entity, address, licence reference, or regulatory statement is displayed.
- Hosting: served from AS16509 (Amazon), a general-purpose cloud network that reveals nothing about the site's operator.
- Transport encryption: TLS certificate issued by WR1 (domain-validated only), valid to 2026-11-27, which confirms encryption but not the operator's identity.
What to Verify Next
No interaction should start from this address. If a person was directed here by a message, advertisement, or contact claiming to represent a wallet or payment brand, they should confirm that claim through the brand's own app or a website address typed manually from an independent source. Any transfer instruction received through this page should be cross-checked through an offline or separately established channel before funds move. Anyone who has already connected a wallet or entered credentials should treat them as exposed. They should rotate credentials and review and revoke wallet approvals. The hosting platform's abuse process can be used to report the page. Evidence:
- Homepage: the stated purpose is a wallet transfer, so any instructions it presents carry direct financial exposure.
- Domain naming: the address is a numbered, generic subdomain on a shared hosting platform and not a branded domain, so it cannot be tied to any named service.
- Security vendors: ongoing malicious classifications mean the address should be treated as hazardous until delisted.
Summary Verdict
The assessment is clearly cautionary and the risk is elevated. Confirmed external threat classifications carry decisive weight, and the absence of any identifiable operator leaves nothing to counterbalance them. Technical hygiene and quiet browsing behaviour are present but do not change the overall posture. The site is not suitable for sensitive or financial use.
Infrastructure Integrity
The site is hosted on Amazon cloud networks behind a mainstream application platform's edge delivery layer, so only edge addresses are visible and the origin cannot be independently confirmed. The platform's protections and a valid TLS certificate are mitigating factors only and say nothing about the legitimacy of the content. The many abuse reports lodged against the shared address belong to the platform's multi-tenant infrastructure and were discounted for that reason.
Closing Assessment
The site should be avoided for logins, credential entry, wallet connections, and payments. If it has already been opened, any interaction should stop and the link should be reported to the platform and to whoever supplied it.
Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by governance, external reputation, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 108 reports on hosting IP 216.198.79.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of sendusdt-2.vercel.app.
- The request stayed on sendusdt-2.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.195 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 17 flagged | AbuseIPDB: 0% confidence, 108 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about sendusdt-2.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.