Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
trustifybep.vercel.app shows high-risk / scam indicators.
| What this site appears to be | A crypto wallet transfer screen for USDT with an amount keypad, an empty recipient field and a Review button. The captured text shows no domain, legal identity or recipient details, so the financial transaction cannot be verified and is rated CRITICAL. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 9 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 103 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a single-page crypto wallet transfer screen titled "Transfer Trust Wallet." It is hosted on a free subdomain of a shared application-hosting platform. It shows a USDT amount keypad with a "Max" shortcut, an empty recipient field, and a "Review" button. Its apparent purpose is to prompt a visitor to start a USDT transfer. No fee, swap, or other revenue mechanism is visible, and the page gives no information about who operates it.
Scam/Impersonation Risk: The evidence shows confirmed contradictions and calls for a clearly cautionary reading. Several major security vendors currently flag the domain as malicious, and the site carries a confirmed blacklist signal in external reputation data. These detections are specific to this hostname, not to its hosting platform. Separately, a large number of abuse reports exist against one of the site's edge IP addresses. That address belongs to a shared content-delivery range of the hosting provider, and the reports carry no reputational weight for this site because they apply to many tenants, so they are discounted. The blacklist and vendor detections are not discounted. The page asks a visitor to begin moving funds while showing no domain-level legal identity, recipient or fee disclosure, or verifiable wallet provenance. The only brand cue is the "Trust Wallet" label, which cannot be tied to any legitimate wallet provider. Because the hostname sits on a shared platform namespace, anyone can publish such a page, and the label adds no credibility. No explicit brand impersonation, phishing form, or conflicting legal identity was confirmed. The risk rests on the blacklist and detection signals, combined with a high-stakes financial prompt that has no verifiable backing.
Regulatory Verification Notes: The site presents no legal entity, no licence or registration number, no terms or privacy pages, and no contact channel. Real-world operator identity is unverified, and both ownership and governance are opaque. The page itself makes no regulatory claim, so there is no licence to check. For a service that would handle user funds, the absence of any disclosure means nothing can be independently reconciled. No third-party broker-reputation record matched this domain, so there is no external regulatory or reputational context beyond the security-vendor detections above. Technical hygiene such as valid encryption does not substitute for identity or authorization.
What to Verify Next: Before any interaction, determine independently whether this page belongs to a genuine wallet provider. Open the provider's official application or website through a route that does not use this page, and compare whether any official source references this hostname. Confirm the operator through the provider's published channels or an authoritative registry. No transfer form on this hostname should be treated as legitimate until the provider confirms it. Confirm the official support and contact channels through an independent, offline route. If the page reached the user through a message, advertisement, or QR code, report the source and keep the original for investigation.
Summary Verdict: The overall posture is high-risk. External threat detections and a confirmed blacklist signal override the otherwise clean technical hygiene, and the site is positioned in the sensitive crypto-transfer category with no verifiable operator behind it. Evidence of legitimacy is absent, while evidence of risk is present and corroborated.
Infrastructure Integrity: The site is served from Amazon-operated address space (AS16509) through the hosting platform's edge network. All eight observed IP addresses are edge servers, and the origin server was not observable. This mitigates some exposure to attack and confirms ordinary infrastructure, but edge-only visibility prevents independent verification of where the content actually resides. It also means the page content can be swapped rapidly without any visible infrastructure change. Protective infrastructure is a mitigating factor only and cannot offset the reputational risk attached to this hostname.
Closing Assessment: The site should be treated as read-only at most. Visitors should not log in, enter credentials, connect a wallet, or send funds. Anyone who received a link to this page should disregard it and navigate to the intended wallet provider directly through its official channels. Anyone who has already interacted with it should move any exposed assets and secure any related accounts immediately.
- Homepage: the only captured content is a USDT transfer form with an empty recipient field and a "Review" button, about 99 characters of text. It has no legal, contact, or fee information.
- Homepage: the site is rated critical because a financial transaction is requested while the proof needed to verify it is missing.
- External reputation: several major security vendors flag the domain as malicious, and a confirmed blacklist signal is present.
- Shared-infrastructure abuse reports (103 on edge IP 216.198.79.195) are discounted because the address is a shared provider range with a zero confidence score.
- Homepage: no company name, jurisdiction, licence, registration number, or policy pages appear in the captured content, and the page has no title or description metadata beyond the on-page label.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), with the platform provider identified as Vercel, Inc.
- Transport encryption: a DV TLS certificate issued by WR1, valid to 2026-11-27. DV validation confirms control of the domain only and says nothing about the operator.
- No third-party broker-reputation match was found for the domain.
- Homepage: the recipient field is empty and no destination or fee is displayed, so there is nothing on the page to reconcile with an official source.
- Page identity: the "Trust Wallet" label cannot be matched to any verified provider from the evidence collected.
- Hostname: it is a free subdomain on a shared hosting platform, so the domain alone confirms no brand ownership.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page has very little readable content.Page content
rule:PAGE_CONTENT_THIN - The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 103 reports on hosting IP 216.198.79.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of trustifybep.vercel.app.
- The request stayed on trustifybep.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.195 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 9 flagged | AbuseIPDB: 0% confidence, 103 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about trustifybep.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.