Security Scan Report: sendusdtt-bep20.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 8 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://sendusdtt-bep20.netlify.app/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Page claims to be a Trust Wallet USDT transfer screen but runs on a free netlify.app subdomain and its script carries a Telegram bot token for exfiltrating submitted data — avoid entering an address or amount.

Risk Factors (5)
Impersonation of Trust Wallet branding on a domain the brand does not own
Telegram bot token embedded in page script enabling silent exfiltration of user-submitted data
Free hosting subdomain used to front a cryptocurrency 'send USDT' workflow
Hardcoded attacker wallet address presented as a transfer destination
No operator identification, terms, or contact information
Domain age information unavailable

Details

Page Title

Transfer Trust Wallet

Scan Type

public

Domain Name Analysis

You're looking at domain 'sendusdtt-bep20.netlify.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'sendusdtt-bep20'. Its registrable label 'netlify' stretches across 7 characters with 2 vowels and five consonants. Segmentation suggests three words: net, li, fy. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Send USDT ‚Address or Domain Name 0x048f69B86C95d50a1957A3F89-Paste 5} © Amount 1 USDT Max ~ $1.00

Page Load Overview

2.74s
Total Load Time
212 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

Text Length:89 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking69% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
69%
cryptocurrency blockchain
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
435.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
2104.16.180.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
263.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
83--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15192D922A5B306EB701FB56D27E673E97437D307E303DBD8B99D52E40F8285618A3648

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:UdvXVfFKow/LOgt8A3Dk8WuEjHkvcWqg24f:QVfFKow/L3t5Dk8Wu6HkvcW32M

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19757:CAEAqmgJAVPMyAQIyiYCgRElPEGjVGSDIWhBFiIEQKiAwxxGZSQh4QgiIEkACAS3AAGBEliICBEqAEjTEgakkIKJFIBZBIIm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7ffffffffffe6
Perceptual Hash:f788778877887588
Difference Hash:4c4c04000000314c
Wavelet Hash:c0c0c0d0f3f3f1e0
Color Hash:N/A

Other Hashes

Crop Resistant:4c4c04000000314c

Scan History

Scan history not available

Unable to load historical scan data