Is sendusdt-omega.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page site on a free Vercel-hosted subdomain, titled "Transfer Trust Wallet". Its name suggests a tool for sending USDT, a Tether stablecoin, and it appears to be a cryptocurrency wallet-transfer front end. The homepage carries only a very small amount of text. It names no operating company, product description, legal terms, or contact details. Its apparent purpose is to get visitors to start a digital-asset transfer, but the page itself does not explain what service is offered or who offers it.

Scam/Impersonation Risk

The evidence contains a decisive contradiction. The site has been blacklisted by external threat-intelligence sources, and a substantial cluster of security engines classify it as malicious. These engines include two tier-one security vendors. Their detections outweigh the site's technical hygiene and are the main reason for the high-risk posture. No conflicting legal identities and no confirmed brand impersonation were observed. The sandbox did not see wallet-connection prompts, wallet-drainer behavior, clipboard manipulation, hidden forms, or data sent to external parties. These are real mitigating observations, but they come from a page that carries almost no content. The page title uses the words "Trust Wallet", and the product concept is a stablecoin transfer. Together these fit a lure pattern in which a wallet-themed page is used to prompt asset transfers. This is an observation about fit, not a confirmed impersonation. The domain is also very new, and the web archive shows no prior history, so nothing earlier can offset the current detections. Abuse reports exist against a shared infrastructure address on the Vercel platform. These are discounted: they relate to a provider-wide network address and not to this site specifically, and they were not treated as evidence against it. Evidence:

• Homepage: very short body text with a "Transfer Trust Wallet" title and no named operator, product details, or terms.
• External reputation: multiple malicious and suspicious detections, including two tier-one vendors, plus a confirmed external blacklist entry.
• Domain provenance: registered 2026 (~33 days old).
• Web archive: 1 snapshot, in 2026 (1 year tracked).

Regulatory Verification Notes

The homepage shows no licensing information, company registration, regulator reference, or legal pages such as terms or privacy policy. The site also gives no way to identify the operator. For a service that proposes moving digital assets, the lack of any financial-services authorization or entity disclosure is a significant transparency gap. On its own it would not prove fraud, but here it sits alongside the external malicious detections. No third-party broker or regulatory-database match exists for the domain, so there is no independent reputational context. Real-world identity is therefore unconnected to any known brand or person. Evidence:

• Homepage: no regulator, license, registration number, or legal-entity name displayed.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27. This confirms an encrypted connection and says nothing about who operates the site.

What to Verify Next

No transfer, wallet interaction, or credential entry should be considered until the operator is identified. The site should be checked against the official channels of the wallet brand its title evokes, to confirm whether any official relationship exists. Any claimed operator should be checked against a financial regulator's public registry. Contact and support channels should be confirmed through an independent route and not through links on this page. Browsing of the site should be limited to isolated, read-only viewing, with the page's current detections re-checked before any later re-evaluation. Evidence:

• Homepage: no stated operator, so any identity claim has to be sourced elsewhere.
• Reputation: current malicious detections remain active and should be re-checked before the site is re-assessed.
• Domain history: a young domain with a single archive capture offers no track record to rely on.

Summary Verdict

The site is rated at a critical trust level with an elevated, security-forward risk posture. Confirmed external threat detections and the lack of any substantive or verifiable identity outweigh the clean behavioral and encryption observations. Its apparent legitimacy cannot be established, and its real-world operator is unknown.

Infrastructure Integrity

The site is delivered through a recognized CDN/WAF platform on Amazon-operated address space, and all observed addresses are edge servers. The origin server was not observable. This is a mitigating factor only: edge-only visibility prevents independent verification of where the content is actually hosted and can mask rapid content swaps. Protective infrastructure cannot offset the reputational risk from the external detections.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any financial transfer. At most, it can be viewed in a read-only manner, and any download or request to sign a transaction should be refused. Further use should wait until the external detections clear and the operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 81 reports on hosting IP 64.29.17.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.