Is usdt-trustwallet-blockchain.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Scam/Impersonation Risk

Multiple independent security engines currently classify this site as malicious, and the combination of external detections amounts to a confirmed blacklisting. Several of the most widely relied-upon vendors are among those flagging it. The detections alone are severe enough to override every protective or neutral signal in the evidence. The hostname borrows a well-known wallet brand and the generic vocabulary of stablecoin transfers, and the page title promises a wallet transfer function. That construction is consistent with a brand-lookalike lure aimed at holders of digital assets. The site is also very young and has almost no independent history, so it has had no time to build a track record that could rebut the detections. In behavioural testing, the page made no external network calls, attempted no wallet connection and showed no clipboard manipulation, hidden forms or cloaking. This shows only that the captured landing page was inert. It does not offset the threat classification, because a thin front page can be swapped for an active payload without notice. Evidence:

• Homepage and hostname: 23 security engines classify the site as malicious, including three leading endpoint-security vendors, and the external blacklist condition is confirmed.
• Domain provenance: the domain is approximately 22 days old (0.06 years), with a single archive snapshot (first and last seen 2026-10-03), spanning one year tracked.
• Homepage behaviour: three successful sandbox runs recorded zero external requests, zero wallet-connection attempts and zero console errors.

Regulatory Verification Notes

The captured homepage carries no legal entity name, no licence or registration number, no terms or privacy pages and no stated jurisdiction. For a site inviting stablecoin transfers, which is a regulated activity in most jurisdictions, nothing on the page ties it to any accountable operator, and independent verification of the operator's identity has not been established. This is a disclosure gap for the verification checklist, not a finding of wrongdoing in its own right. The unresolved identity matters here because it sits alongside the confirmed threat detections. No third-party broker or regulatory-registry match was found for this site, so no reputational signal from that source applies. The valid transport-encryption certificate is a basic hygiene measure that any site, including malicious ones, can obtain. It says nothing about the operator's legitimacy. Evidence:

• Hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), registry ARIN, country US.
• Transport encryption: TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27 with 32 days remaining.
• Homepage: the captured text is only 89 characters long and names no operator, licence or contact route.

What to Verify Next

Any claim that this page belongs to Trust Wallet or to a wallet provider should be checked only through the provider's officially published channels, reached independently of this site (for example, by typing the known official address or using the official app store listing). The same applies to confirming the official support and contact channels. Stablecoin transfers should never be initiated from this page, and any person who has already interacted with it should treat any connected wallet, entered recovery phrase or approved token spending permission as potentially exposed. In that case they should move remaining funds to a fresh wallet and revoke existing approvals. Evidence:

• Hostname: the site sits in the shared subdomain space of a hosting platform, so the registrable domain reveals nothing about the operator.
• Homepage: the wallet-transfer proposition is made without any named operator, so there is no counterparty to confirm independently.

Summary Verdict

The overall posture is clearly cautionary and the risk is high. Confirmed external threat detections are decisive, and the site's youth, thin content and lookalike branding all point in the same direction as those detections. Nothing in the evidence supports treating the site as an established or apparently legitimate service. At most, the page is suitable for passive, read-only inspection.

Infrastructure Integrity

The site runs on shared application-hosting infrastructure behind a content-delivery layer. All observed addresses are provider edge servers, and no origin server was identifiable. As a result, hosting cannot be independently verified, and content can be changed quickly without leaving a visible trace. The site's use of this infrastructure is a mitigating factor only, and it cannot offset the reputational risk. A sizeable number of abuse reports exist against one of the shared edge addresses, but they are attributed to the provider's shared infrastructure and discounted. They are therefore not counted against this site specifically.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial or token-transfer activity, and it should be treated as read-only content at most. Anyone who encountered it through a message, advertisement or search result should avoid following its prompts and report the link to the hosting platform and to the wallet brand's official security team.

Signals weighed against the site

• AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.