wallet-usd.netlify.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of wallet-usd.netlify.app
This domain appears to host a lightweight web page related to cryptocurrency transfers, specifically referencing USDT on Binance Smart Chain. The page title, "Transfer Trust Wallet," and the visible interface suggest it is presenting itself as a wallet or token-transfer utility where a visitor can enter an address and amount before proceeding.
Based on the domain structure, this is a subdomain hosted on Netlify rather than a primary branded domain for a major financial platform. The content shown is minimal and transactional in nature, with little visible company, legal, or organizational information. That limited transparency makes it difficult to verify who operates the page based on the available data.
Safety Assessment for wallet-usd.netlify.app
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. The page also references a well-known cryptocurrency wallet brand in its title while operating from an unrelated Netlify subdomain, which may indicate an attempt to imitate a trusted financial service.
The malware scan did not detect malicious files in the sampled page resources, and major content-focused threat databases listed here did not report active malware or phishing entries at the time of this scan. However, that cleaner file-level result is outweighed by the broader phishing consensus from multiple security engines and the page’s sparse, high-risk financial workflow. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting.
Given the combination of phishing classifications, brand-referencing financial content, and the use of a generic hosting subdomain rather than an official brand domain, this website may pose potential risks to visitors. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry extending into 2027. It is hosted on Netlify infrastructure backed by AWS in the us-east-1 region, and the resolved server IP is located in Ashburn, United States. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional authenticity layer.
From the scan data provided, no malicious files or flagged external links were detected in the sampled resources, and the page appears technically simple, loading local JavaScript/CSS plus a public JavaScript library. The main concern is not the TLS or hosting setup itself, but the apparent use of a hosted subdomain for a financial-themed page that has been broadly classified as phishing at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?