Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
u-lovat-six.vercel.app shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 15 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 107 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a minimal, single-page site on a free subdomain of a public application-hosting platform. Its only visible content is a title reading "Transfer Trust Wallet" and a few dozen characters of text. It appears to present a cryptocurrency wallet-transfer function, with no identifiable operator, product description, or business model beyond that.
Scam/Impersonation Risk
Active contradictions are present, and the site carries an elevated risk of being a wallet-themed credential or asset-capture lure. It is blacklisted by external threat-intelligence sources, and several major security vendors independently flag it as malicious. That is a decisive negative signal. A "transfer wallet" page with almost no explanatory content fits the pattern of crypto-lure pages, which typically ask visitors to connect or import a wallet and then redirect assets or capture seed phrases. No confirmed brand impersonation or conflicting legal identities were observed, and no contact email is published. In controlled sandbox runs, the page made no external network calls and showed no wallet-connection attempts, drainer behavior, clipboard manipulation, hidden forms, or cloaking. That is a mitigating observation, but it does not offset the reputational findings. A malicious payload can sit behind a later interaction step or be swapped in after capture. Abuse reports recorded against the platform's shared edge address are discounted. They relate to infrastructure used by many unrelated tenants and are not attributed to this site. Evidence:
- Homepage: the title "Transfer Trust Wallet" and very sparse body text give no stated purpose, operator, or product details.
- External reputation: 15 engines rated the domain malicious and 1 suspicious. Three tier-1 security vendors (Fortinet, Kaspersky, Sophos) were among those flagging it.
- Behavioral sandbox: 3 of 3 runs completed with HTTP 200, 0 external requests, 0 wallet-connection or drainer events, and 0 hidden or external-posting forms.
- Shared-address abuse reports: 107 reports against the shared edge IP 216.198.79.195, with a zero confidence score and the address whitelisted as shared CDN infrastructure.
Regulatory Verification Notes
The site shows no legal or identity pages, and no company name, licence, registration number, or jurisdiction. For a site presenting a financial-style transfer function, that leaves ownership and governance entirely unestablished. Real-world identity could not be connected to any brand or person. This is a verification gap, not proof of fraud in itself, but here it compounds the external reputational findings. No third-party broker or regulator listing matched the site, so there is no independent regulatory standing to rely on. Evidence:
- Homepage: no operator name, licence, registration number, or legal-entity disclosure is present.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), as a subdomain of a public hosting platform rather than an independently registered brand domain.
- Transport security: the TLS certificate is issued by WR1 at DV (domain-validated) level, valid to 2026-11-27, with 32 days remaining. DV confirms only control of the domain, not the operator's identity.
- Third-party broker database: no match found.
What to Verify Next
The site should not be treated as a candidate for engagement. If its link arrived through a message, social post, or advertisement, the sender should be contacted through an independent route to establish whether it was legitimate. Anyone whose wallet details were already entered should treat that wallet as potentially exposed. The official application or website of any wallet provider named by the sender should be reached only through its verified official channel, not through this link. Any claimed operator should be asked for a verifiable legal entity and regulatory registration that can be confirmed with the relevant registry. Evidence:
- Homepage: the wallet-transfer framing offers no verifiable provider, so authenticity must be established outside the site.
- External reputation: multiple security vendors currently flag the domain as malicious, so no benefit of the doubt is warranted pending delisting.
- Identity: no operator is named, so any legitimacy claim needs independent proof.
Summary Verdict
The available evidence supports a clearly cautionary, high-risk posture. Confirmed external threat detections are decisive, and mitigating factors, including a valid certificate and quiet sandbox behavior, cannot offset them. The site's identity is not established, and its wallet-transfer framing is consistent with asset-capture schemes. At most, it is suitable for passive, read-only observation.
Infrastructure Integrity
The site is delivered through a trusted CDN/WAF layer on Amazon-hosted address space, with a valid certificate and a consistent set of edge addresses. The origin server was not observable, so the real hosting location cannot be independently verified. Content could also be changed rapidly behind the edge without outside visibility. These protections are only a mitigating factor. They show the platform is secure, not that the content or operator is trustworthy.
Closing Assessment
Account login, wallet connection, seed-phrase or credential entry, and any financial transaction on this site should be avoided entirely. Nothing should be downloaded from it. Any wallet already exposed to it should be secured immediately by moving assets to a new wallet.
Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by governance, external reputation, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 107 reports on hosting IP 216.198.79.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of u-lovat-six.vercel.app.
- The request stayed on u-lovat-six.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.195 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 6 |
| Edge IP addresses | 6 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 15 flagged | AbuseIPDB: 0% confidence, 107 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about u-lovat-six.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.