Is sendusdtupdated.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website on a free subdomain of a public application-hosting platform. Its address refers to sending USDT, and the page is titled "Transfer Trust Wallet". It shows only a very short fragment of text, under one hundred characters, and has no visible products, company description or navigation. Its apparent purpose is to steer a visitor toward a cryptocurrency stablecoin transfer involving a wallet.

Scam/Impersonation Risk

Multiple independent security engines currently flag this site as malicious or suspicious, including three tier-one vendors. The external reputation feeds therefore place it on a confirmed blacklist, and that hit is the decisive risk factor. The address and page title frame the site around "sending USDT" and a "Trust Wallet" transfer. That is a theme commonly used to lure visitors into moving funds, and the name echoes a well-known wallet brand without any evidence of a link to it. No conflicting legal identities and no confirmed brand impersonation were established. The elevated assessment rests on the blacklist hits and the funds-transfer framing, not on an identity contradiction. A large number of abuse reports are attached to the shared platform address the site resolves to. They concern the provider's shared infrastructure and cannot be attributed to this site, so they are discounted. The site's own observed behaviour was benign: no wallet-connection prompts, hidden forms, outbound data submissions or content cloaking appeared in repeated test visits. That is a mitigating observation only and does not offset the external detections. No contact address was published on the page. Evidence:

• Homepage: the title reads "Transfer Trust Wallet", and the hostname references an updated USDT send flow.
• Reputation checks: 19 security engines flagged the site as malicious and 2 as suspicious, including Fortinet, Kaspersky and Sophos.
• Shared-address abuse reports: 82 reports on 64.29.17.131 are attributed to the hosting platform's shared address, with zero confidence against the site, and were discounted.
• Behavioural testing: 3 of 3 runs completed with no external requests, no wallet-provider interaction, no clipboard manipulation and no cloaking.

Regulatory Verification Notes

The homepage discloses no operating company, jurisdiction, licence, registration number, terms or privacy documentation. The only content is the brief wallet-transfer fragment. Because no legal or identity pages exist, no entity could be tied to the site. This is a verification gap on the site's own content. It is not an identity contradiction and is not treated as evidence of wrongdoing by itself. No regulatory standing could be established, and no third-party broker or regulator listing matched. The site presents no financial-services claims to assess, yet it invites a value-transfer action. The site uses transport encryption from an entry-level domain-validated certificate. That confirms an encrypted connection only and says nothing about the operator's identity or intent. Evidence:

• Homepage: no company name, address, licence or registration details, and no terms or privacy pages.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27, with 33 days remaining.
• Third-party reputation: no broker-intelligence match.

What to Verify Next

Any request to send USDT, link a wallet or approve a transaction should be traced back to a known party through an independent, offline channel. A genuine counterparty will have communicated the destination through a route established before this page was reached. The wallet brand the page evokes should be contacted through its officially published support channels to confirm the page is not theirs. Anyone who has already interacted with the page should review their wallet's token approvals and move funds to a fresh wallet if any approval was granted. The page can also be reported to the hosting platform's abuse process so the listing can be reviewed. Evidence:

• Homepage: the transfer-focused title and hostname give no stated recipient, counterparty or service owner to verify.
• Reputation checks: the active detections persist, so any change in status should be re-checked before any reconsideration.
• Platform context: the site sits on a shared, publicly available subdomain, so the platform's abuse channel is the relevant escalation route.

Summary Verdict

The overall posture is high-risk. Convergent external threat detections decisively outweigh the site's technically orderly behaviour, and its operator cannot be connected to any real-world person or organisation. The evidence supports a clearly cautionary classification and does not support treating the site as an established or legitimate service.

Infrastructure Integrity

The site resolves entirely to edge addresses of its hosting platform on Amazon-operated infrastructure. No origin server was observable. This arrangement is a mitigating factor for availability and basic exposure, but it prevents independent verification of the true hosting origin and can allow content to be changed quickly without notice. It provides no assurance of legitimacy and cannot offset the reputation risk.

Closing Assessment

The page should be treated as read-only at most. No wallet should be connected, no credentials entered, no funds sent and no files downloaded from it. Anyone directed here by a message, advertisement or third party should disengage and report the source of the referral.

Signals weighed against the site

• AbuseIPDB: 82 reports on hosting IP 64.29.17.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.