Is trustwalletindia-beta.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-screen web page titled "Transfer Trust Wallet". It imitates the send-funds step of a cryptocurrency wallet app. It shows a USDT amount keypad, an empty recipient ("To") field, a "Max" shortcut and a "Review" button. The page sits on a free subdomain of a shared application-hosting platform, and the subdomain label uses the Trust Wallet name with an "india-beta" suffix. Its apparent purpose is to capture a user-initiated stablecoin transfer. No operator, fee model or monetization is visible.

Scam/Impersonation Risk

The evidence converges on a high-risk posture because of a confirmed external blacklist. Multiple major security vendors currently flag the site as malicious, including several widely used enterprise security vendors, and that detection alone places the site in an elevated-risk category. The detections do not state a specific threat category. The assessment therefore does not claim a confirmed phishing campaign. It does not need to, because the surrounding evidence is consistent with a lookalike fund-transfer lure. The page borrows a well-known wallet brand in its title and subdomain, yet it is hosted on a generic, disposable-style subdomain rather than any domain controlled by that brand. It presents a financial action (entering a USDT amount, then reviewing a transfer) with no recipient context, no fee disclosure and no operator identity. Behavioral testing found no hidden forms, cloaking, wallet-drainer routines or clipboard manipulation in the captured interaction. The page is also very thin, so it may be an early-stage lure or a shell that later receives active content. Reports of abuse against the shared hosting provider's address are discounted in this assessment, because they relate to infrastructure shared with many unrelated sites. They are not attributed to this site. Evidence:

• Homepage: the only captured page is a transfer form with a blank recipient field, an amount keypad and a "Review" button. It has no title metadata, no description and no outbound links.
• Homepage and hosting address: the Trust Wallet name appears in the page title and the subdomain label, while the registrable domain belongs to the shared hosting platform. This is a brand-association mismatch.
• Reputation checks: the site is currently blacklisted by several independent security vendors, and the aggregate malicious detection count is high.
• Domain provenance: the domain was first observed in 2026 (about 10 days old), with 1 archive snapshot spanning 2026 (1 year tracked). That is no meaningful history on which to base trust.

Regulatory Verification Notes

The site contains no legal-identity, licensing, terms, privacy, contact or about content. No operating company, registration number, regulator or license is named, and none is claimed. For a page asking a user to initiate a crypto transfer, this is a material disclosure gap. On its own it is a verification issue. Here it compounds the confirmed blacklist rather than standing alone. Operator identity cannot be independently connected to any real-world brand or person, so no legitimacy should be inferred from the wallet branding. No third-party broker or regulatory-database match exists for this site. The absence of a match is neutral, and it is not a regulatory verdict. Evidence:

• Homepage: no company name, registration details, license claim, jurisdiction, fee schedule or support channel is displayed anywhere on the captured screen.
• Site content: no legal pages (terms, privacy, risk disclosure) were found. Link-graph analysis found zero internal and zero external links.
• Transport encryption: the TLS certificate is issued by WR1 (domain-validated only), valid to 2026-11-27. This confirms encrypted transport only, not operator identity.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), which is generic cloud capacity and does not identify the site's operator.

What to Verify Next

Any relationship with the Trust Wallet brand should be tested only through the brand's own channels. Reach them through an independently obtained route, such as the official app store listing or the brand's known website typed manually, never through this page or links it supplies. If the page was received through a message, advertisement or social post, the sender should be contacted through a separate, known channel and the originating message reported. Anyone who has already interacted with the page should confirm that no wallet was connected, no recovery phrase was entered and no transfer was authorized. They should also review recent wallet approvals and activity. The official support channels of the genuine wallet provider should be confirmed offline before any further action. Evidence:

• Homepage: the transfer screen offers no recipient, fee or operator information that could be checked against an external registry.
• Brand association: the Trust Wallet name appears only in the page title and the subdomain label, so any claim of affiliation is unsupported by the site itself.
• Browser behavior: three sandbox runs found no wallet-connection prompts, external requests or form submissions, so the page's intended onward flow has not been observed.

Summary Verdict

The site is assessed as critically untrustworthy and carries an elevated, clearly cautionary risk posture. A confirmed multi-vendor blacklist, a brand-themed lookalike hosting identity and a brand-new, history-free domain converge on the same conclusion, and the page's thin content gives no countervailing evidence of legitimacy. Operator identity remains unverified.

Infrastructure Integrity

The site is served through a recognised cloud and edge-delivery platform with a valid, correctly chained TLS certificate. All observed addresses are shared edge servers, and the origin host was not observable. These are mitigating factors only. They show the hosting is technically sound. They say nothing about who operates the site or what it does, and they cannot offset the confirmed external threat detections. The shared edge layer also lets page content be changed without any visible change in network address, so the current benign-looking behavior is not a durable assurance.

Closing Assessment

The site should be treated as unsafe for any login, credential entry, wallet connection or fund transfer, and read-only viewing is the only reasonable interaction. Recovery phrases, passwords and funds should never be entered or sent via this page. Any wallet service should be accessed only through the provider's official application or a manually typed, independently confirmed address. If any interaction has already occurred, the exposed accounts should be secured and the incident reported to the genuine provider.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.