Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
sendusdt-trust-scan.vercel.app shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 18 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 82 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Regulatory Verification Notes
The homepage discloses no operating company, jurisdiction, licence, registration number, terms of service or privacy policy. This is a content gap on a page that invites crypto transfer activity. Ownership and governance are opaque, but that is an opacity condition and not an identity contradiction, because no conflicting legal entities appear. The site cannot be tied to any regulated financial service provider. No third-party broker or regulator-style reputation record matches the site, so there is no external reputational context either way. The absence of a licence is not itself evidence of fraud. Here it compounds the independent security detections, because there is no accountable operator to hold responsible. Evidence:
- Homepage: no company name, address, licence, registration number, legal pages or support channel is presented.
- Hosting infrastructure: the site is served from AS16509 (AMAZON-02 - Amazon.com, Inc., US) on a shared platform subdomain, not on an independently registered brand domain.
- Broker reputation lookup: no match found, so no regulatory or broker status can be confirmed.
What to Verify Next
Before any interaction, an organization should independently confirm whether the "Transfer Trust Wallet" service exists as a genuine product by checking the official website and app-store listings of any wallet provider it claims to represent, reached through independent channels and not through this site. Any request or message that directed a user here should be traced back to its sender through a separate, trusted route. If assets were already sent or a wallet was already connected, the user should revoke wallet permissions, move remaining funds to a new wallet and report the incident to the relevant platform and authorities. Security teams should also confirm official support and contact channels offline before engaging with anyone linked to this site. Evidence:
- Homepage: no operator or product identity is stated, so independent confirmation is the only route to verification.
- Security detections: the current malicious classifications should be re-checked before any decision to unblock the site.
- Sandbox behavior: the page was passive at test time, so a later content change is the main residual risk to monitor.
Summary Verdict
The site is assessed as high risk, with a clearly cautionary posture. Sustained, independent security detections outweigh its technically sound but unremarkable foundations. The page offers no verifiable operator identity or accountable legitimacy to counterbalance them.
Infrastructure Integrity
The site runs on shared Vercel platform infrastructure within Amazon's network (AS16509, US), behind a CDN or WAF layer. All observed addresses are edge servers, and no origin server is visible. The edge layer, the valid certificate and the stable responses are mitigating factors only. They do not offset the security detections, and edge-only visibility prevents independent hosting verification and can mask rapid content swaps. The 82 abuse reports on the primary edge address are attributed to the shared provider address and not to this site specifically, so they are discounted and carry no weight against it.
Closing Assessment
The site should not be used for login, credential entry, wallet connection or any financial transfer. Access should be limited to passive viewing in an isolated environment, and it should be blocked in organizational security controls until the detections are independently cleared.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by governance, external reputation, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 82 reports on hosting IP 64.29.17.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of sendusdt-trust-scan.vercel.app.
- The request stayed on sendusdt-trust-scan.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.131 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 6 |
| Edge IP addresses | 6 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 18 flagged | AbuseIPDB: 0% confidence, 82 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about sendusdt-trust-scan.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.