Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
wallet-click-tow.vercel.app shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 16 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 82 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The page titled "Transfer Trust Wallet" is a single-page site on a free subdomain of a developer hosting platform. It shows only a few lines of text, apparently promoting a wallet-transfer function. It lists no company, product description, or contact details. Its purpose appears to be to move visitors toward a cryptocurrency wallet interaction, but the site does not state its business model.
Scam/Impersonation Risk
The evidence shows serious contradictions. Several tier-one security vendors currently flag the site as malicious, and a wider set of external engines agrees. That is enough for a confirmed blacklist listing. This is the decisive finding, and the report treats it as such. The title promotes a wallet-transfer function, and the hostname is a throwaway-style combination of "wallet", "click" and a truncated word. That is the pattern commonly used for wallet-lure and credential-harvesting pages. No brand impersonation or conflicting legal identities were confirmed. The sandbox visits saw no outbound data calls, wallet-connection prompts, clipboard writes, or hidden forms. However, the page is minimal, and a clean automated session does not offset live detections from multiple independent vendors. A large number of abuse reports exist against the shared platform IP. They are attributed to the provider's shared infrastructure and discounted, so they are not counted against this site. The platform's free subdomain model also lets anyone publish pages and swap their content quickly, which leaves the real operator unidentified. Evidence:
- Homepage: the only visible content is a short "Transfer Trust Wallet" message, with no operator, product, or support details.
- External reputation: multiple tier-one security vendors and a broader group of engines flag the site as malicious, which triggered a maximum-severity cap.
- Shared infrastructure: 82 abuse reports on IP 64.29.17.131 (Vercel, content delivery network, 0 confidence score), attributed to shared infrastructure and discounted.
- Sandbox: three successful runs showed no external requests, wallet-connection activity, or clipboard manipulation.
Regulatory Verification Notes
The homepage carries no legal entity name, terms, privacy policy, licensing statement, or registration number. No regulatory status can be associated with the site, and no third-party broker record was matched. For a site that invites wallet-related actions, this lack of disclosure is a content gap. It is not itself proof of wrongdoing, but here it reinforces the external threat findings and does not mitigate them. The hosting on a free developer-platform subdomain gives no information about who stands behind the content. Identity linkage to any real-world brand or person remains unestablished. Evidence:
- Homepage: no company name, license, registration number, or legal pages are present.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), a general-purpose cloud network that hosts legitimate and malicious sites alike.
- Transport encryption: TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27 with 32 days remaining. This confirms encryption but says nothing about who operates the site.
What to Verify Next
The site should be treated as untrusted until the detections are resolved. Anyone who has already visited should check whether any wallet connection or signature request was approved and, if so, review and revoke token approvals through a reputable wallet-permissions tool. Anyone who received the link through a message, advertisement, or social post should trace it back to the sender through an independent channel. The wallet provider's official website, reached by typing its address directly, should be the only route used for transfers. Anyone seeking the site's operator should find the official support channels through the genuine provider and not through this page. Evidence:
- Homepage: it offers no verifiable operator or contact route, so independent confirmation cannot start from the page itself.
- Threat listings: current malicious detections mean any re-test should only follow documented clean-up or a delisting by the flagging vendors.
- Transport layer: certificate validity shows only encrypted transport and should not be read as proof of legitimacy.
Summary Verdict
The overall posture is high risk. Confirmed malicious detections from multiple independent security sources dominate the assessment, and the minimal page offers no identifying content to contradict them. The identity of the operator is unknown, and nothing in the available evidence supports treating the site as safe for sensitive use.
Infrastructure Integrity
The site is served from cloud edge servers of a mainstream hosting platform, and every observed address is an edge node. The platform's shared infrastructure means traffic analysis cannot reveal the underlying origin, and it allows content to be replaced quickly without any change in address. The valid certificate and recognised network provider are mitigating technical hygiene only. They do not offset the reputation findings, and they say nothing about the operator.
Closing Assessment
Do not connect a wallet, sign any transaction, enter credentials, or make any payment on this site. At most, treat it as a page to be reported or ignored.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by governance, external reputation, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 82 reports on hosting IP 64.29.17.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of wallet-click-tow.vercel.app.
- The request stayed on wallet-click-tow.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.131 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 16 flagged | AbuseIPDB: 0% confidence, 82 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about wallet-click-tow.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.