Is usdt-transfer-bep-1-5.netlify.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a minimal single-page site served from a free Netlify-hosted subdomain. Its page title is "Transfer Trust Wallet", and the hostname advertises a "USDT transfer" on the BEP (BNB Smart Chain) network. The captured homepage holds only a few dozen characters of text. It offers no company description, product explanation, or contact details. Its apparent purpose is to prompt visitors to start a USDT or wallet transfer, a pattern typical of crypto-asset lure pages.

Scam/Impersonation Risk

Contradictory signals are present and severe. The site is blacklisted by multiple independent sources: a major browser-safety service flags it for social engineering, and a large cluster of security vendors independently classify it as malicious, including several of the most widely trusted ones. These detections trigger an automatic protective cap on the site's trust standing, which infrastructure quality cannot offset. The hostname combines a stablecoin ("usdt"), a network name ("bep") and a "transfer" instruction under a generic hosting domain, while the page presents itself as a Trust Wallet transfer tool. That is the profile of a wallet-brand lure, built to make a visitor believe a token transfer is a routine, branded action. The page shows no outbound data submission, hidden forms, wallet-connection prompts or clipboard manipulation in the behavioral runs. This does not clear the site: such a page can be a staging stub, and its content can be swapped quickly after a visitor is directed to it. Four abuse reports exist against a Content Delivery Network address that serves this site. These apply to shared provider infrastructure and are not attributable to the site alone, so they are a secondary signal. No conflicting legal entities appear, because the page names no entity at all. Evidence:

• Homepage: the page title presents a "Transfer Trust Wallet" function, and the hostname encodes a USDT/BEP transfer, matching a wallet-transfer lure pattern.
• Reputation: a major browser-safety service reports a social-engineering classification, and 21 security engines return a malicious verdict, including four top-tier vendors.
• Provenance: registration continuity shows ~0.26 years (~96 days) of existence, with 1 archive snapshot (2026, 1 year tracked).
• Behavior: three of three runs returned stable HTTP 200 responses with zero external network activity and no cloaking.

Regulatory Verification Notes

The page makes no licensing, registration or regulatory claims and names no operating company. A site inviting asset transfers with no identifiable legal entity, no terms, and no privacy or contact pages gives a visitor nothing to hold an operator accountable for. No third-party broker or regulatory record is associated with the site, so no regulated-entity status can be inferred. A technically valid, organization-validated certificate is present, but it belongs to the hosting platform rather than to any operator of this page, so it confirms encryption only and says nothing about the site's legitimacy. Evidence:

• Homepage: no company name, licence number, jurisdiction, or terms of service are presented.
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organization Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).

What to Verify Next

No credentials, seed phrases, wallet connections or token approvals should be entered on this site. Anyone who reached it through a message, advertisement or social-media link should trace that link back to its sender. Any genuine wallet-transfer instruction should be confirmed by opening the official wallet application or the provider's official site directly, typed in or taken from a trusted bookmark. Anyone who has already interacted with the page should review and revoke token approvals on the wallet's blockchain explorer, move funds to a fresh wallet if a seed phrase was exposed, and report the page to the impersonated brand and the hosting platform's abuse desk. Official support channels should be confirmed through an independent route. Evidence:

• Homepage: the site gives no verifiable operator, so any claim to be an official wallet service cannot be validated from the page itself.
• Reputation: independent browser-safety and security-vendor detections are current and remain unresolved.
• Behavior: the absence of wallet-connection prompts in the tested runs does not rule out later content changes.

Summary Verdict

The overall posture is high risk. Independent, current threat detections and a social-engineering classification, combined with a thin, brand-evocative transfer page, outweigh the site's clean technical hygiene and stable behavior. The site's identity is unverified, and available evidence points toward a deceptive or malicious purpose rather than a legitimate service.

Infrastructure Integrity

The site is delivered through Amazon's cloud edge network. All observed addresses are edge nodes, and no origin server could be observed, so the real hosting location cannot be independently verified. That makes it harder to see where content actually comes from. This is a mitigating factor for availability and basic hygiene only. It cannot offset the threat detections and is not evidence of legitimacy.

Closing Assessment

The site should be treated as unsafe for any login, credential entry, wallet connection or financial action. Read-only viewing is the only reasonable interaction. Any funds or credentials already exposed through it should be secured immediately.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.