Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
trustsenderbyfrt.vercel.app shows high-risk / scam indicators.
| What this site appears to be | A crypto wallet transfer screen branded Trust Wallet, showing an amount field in USDT, a recipient field and a Review button. Because the domain is unknown, the page cannot be confirmed as the official Trust Wallet site, and the transfer is a financial action with no verifiable operator, fee or legal context. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 20 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 84 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Scam/Impersonation Risk
This site presents confirmed adverse threat-intelligence findings, and the assessment is explicitly cautionary. Multiple independent security engines currently flag the domain as malicious, including three tier-one security vendors, and an external blacklist listing is active. This is the decisive finding and it overrides every neutral technical attribute. The homepage uses the Trust Wallet name for a USDT transfer flow, but nothing ties the page to the genuine wallet provider. The hosting domain is a generic subdomain whose naming resembles an unrelated platform, and the page cannot be confirmed as official. The transfer screen asks for a recipient and an amount, which is a financial action and the typical shape of a funds-redirection or wallet-draining lure. Abuse reports exist against one of the shared edge addresses serving the site. They were discounted because that address is shared provider infrastructure used by many unrelated tenants. They are therefore not counted as evidence against this specific site. The sandbox did not observe wallet-drainer behaviour, clipboard hijacking, hidden forms or external data posting, and that is noted for balance. The sandbox saw the page as inert, but the independent blacklist and detection findings still stand. No conflicting legal identities were found, because the site discloses no legal identity at all. Evidence:
- Homepage: twenty security engines rated the domain malicious and one rated it suspicious, including three tier-one vendors. A confirmed blacklist listing triggered the maximum-severity override.
- Homepage: the visible content is only a "Transfer Trust Wallet" screen with a USDT amount, a "To:" recipient field, a keypad and a "Review" button. No domain-level link to the official wallet brand exists.
- Browser sandbox, three successful runs: no external requests, no wallet-connection prompts, no clipboard writes and no cloaking were observed.
- Hosting infrastructure: 84 abuse reports were attributed to a shared provider edge address and discounted as not specific to this site.
Regulatory Verification Notes
The site publishes no legal, terms, privacy, about or contact pages. It names no operator, company, licence or registration number, and it states no fees, refund terms or dispute route. For a service that moves a stablecoin, which is high-stakes and irreversible, this absence of disclosure means no legal accountability can be established. The structured assessment flags ownership and governance opacity and rates the business model as high-risk and untrusted, with its legal status unverifiable. Identity verification is unverified, so no real-world operator or brand link can be asserted. No third-party broker or regulatory-database match exists for this site. That is neutral context and neither confirms nor excludes licensing. Evidence:
- Homepage: no operator name, licence, registration number, support channel or terms of service is displayed. The page carries only 99 characters of text and has no title or meta description.
- Hosting: the site is served from AS16509 (AMAZON-02, Amazon.com, Inc., US) in the United States.
- Transport encryption: the TLS certificate is a DV certificate issued by WR1, valid to 2026-11-27. DV validation confirms control of the domain only, and says nothing about who operates the site.
- Business-model review: the page is classed as a crypto wallet or transfer service with no verifiable monetisation, which marks it as high-risk and untrusted.
What to Verify Next
Do not trust the Trust Wallet branding on this page. The official provider should be reached only through its own channel, such as a bookmarked address or an application downloaded from an official store. The user should not enter any amount, recipient address or wallet credential on this page. Anyone who received this link in a message, advertisement or social post should check with the apparent sender through a separate, independent channel. The sender's account may be compromised or spoofed. Anyone who has already interacted with the page should check wallet token approvals, move remaining assets to a freshly created wallet, and report the link to the genuine wallet provider and to the hosting platform's abuse desk. Official support contact details should be confirmed only from the genuine provider's own site. Evidence:
- Homepage: the page offers a "Review" action that leads into a transfer, with no stated fee, confirmation or dispute mechanism to check against.
- Threat intelligence: the active detections apply to this domain itself, so the site cannot be treated as an official or safe endpoint.
- Hosting: the page sits on a shared free-tier application subdomain, which gives no brand-owned channel to confirm.
Summary Verdict
The overall posture is critical and high-risk. Independent threat detections, an active blacklist listing and a financial-transfer lure bearing an unverifiable brand outweigh the site's technical hygiene and its benign sandbox behaviour. The available evidence supports treating the site as hostile to users until it is demonstrably cleaned or proven official.
Infrastructure Integrity
The site is fronted by a trusted content-delivery and edge network, with all six observed addresses being provider edge nodes, and the real origin server was not observable. Infrastructure is stable and resolves cleanly, with a valid certificate from a known issuer. This is only a mitigating signal. Edge-only visibility also prevents independent verification of the hosting and allows content to be swapped quickly. Protective infrastructure cannot offset the reputation findings here and does not indicate legitimacy.
Closing Assessment
The site should not be used for any login, credential entry, wallet connection or transfer, and any link to it should be treated as hostile and reported. If it is encountered through a message or advertisement, leave the page without interacting and use only the official provider's verified channels.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page has very little readable content.Page content
rule:PAGE_CONTENT_THIN - The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of trustsenderbyfrt.vercel.app.
- The request stayed on trustsenderbyfrt.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.67 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 6 |
| Edge IP addresses | 6 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 20 flagged | AbuseIPDB: 0% confidence, 84 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about trustsenderbyfrt.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.