Is bsc-dl663k94x.vercel.app safe? TrustSniffer's low-trust assessment: 35/100

Overview

The hostname is an auto-generated-style subdomain on Vercel's shared application-hosting platform. It carries no branded or independently registered domain, and the label suggests a short-lived project deployment rather than an established brand. Analysis captured no readable merchant, product, or corporate content, so the site's business purpose cannot be established from the evidence.

Scam/Impersonation Risk

Several independent security engines currently flag this hostname as malicious or suspicious, and an external blacklist listing is confirmed. This is the decisive finding. Infrastructure quality and clean technical behavior do not offset it. No brand impersonation, phishing-page match, or conflicting legal identities were observed, so the elevated risk rests on the reputational listings and not on proven impersonation. The large volume of abuse reports tied to one of the platform's shared edge addresses is attributed to the hosting provider's multi-tenant infrastructure. It is not treated as evidence against this site, and it was discounted. Behavioral sandbox runs were stable and showed no outbound third-party requests, wallet-drainer activity, clipboard manipulation, hidden forms, credential posts to external hosts, or cloaking. Those results lower the likelihood of active client-side exploitation during the test sessions, but they do not remove the listings. Content on a free, disposable subdomain can also be swapped quickly. Evidence:

• Hostname structure: a generated-style subdomain on a shared application-hosting platform, with no standalone registered domain.
• Reputation checks: 3 engines rated the hostname malicious and 1 suspicious, and an external blacklist listing is confirmed.
• Abuse reports: 108 reports are attached to a shared provider edge address, classed as shared infrastructure and discounted.
• Sandbox behavior: 3 of 3 runs completed with zero external requests, zero console errors, and no cloaking.

Regulatory Verification Notes

The site discloses no identifiable operator, licensing status, or regulatory registration. No third-party broker or regulator record matched it, and no reputational broker warning applies. The real-world operator has not been independently connected to any brand, company, or person. That absence is a verification gap, not proof of wrongdoing, but it matters more because of the reputational listings. The site is not recognized in the DeFi protocol directory, so no established-protocol status can be assumed. Its transport encryption is valid but is a basic domain-validated certificate, which confirms encrypted transport only and says nothing about who operates the site. Evidence:

• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), registry ARIN.
• Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27, with 31 days remaining.
• DeFi directory lookup: the site is not listed.
• Broker intelligence: no match in the broker reputation dataset.

What to Verify Next

Before any interaction, the operator should be tied to a named, registered entity through an independent route, such as the official channels of a brand the site claims to represent. Any claim that this deployment belongs to a known project should be checked against that project's officially published addresses, not links found on the site. Official support and contact channels should be confirmed independently. The current listings should be re-checked later, since a cleaned deployment may be delisted, and a site that stays flagged should be avoided. Evidence:

• Identity: operator identity is unverified and no legal entity is named.
• Reputation: the malicious and suspicious detections and the blacklist listing are current at assessment time.
• Hosting: the shared platform subdomain gives no independent link to a brand-owned domain.

Summary Verdict

Available evidence supports an elevated-risk posture. Confirmed external threat detections carry the assessment, and they are not offset by the clean sandbox behavior or the valid encryption. Operator identity remains unverified, so no legitimacy can be presumed.

Infrastructure Integrity

The site is delivered through a recognized platform and CDN/WAF layer on Amazon-operated address space, and all observed addresses are edge servers. The origin server was not observable. This mitigates direct-hosting exposure and reflects mainstream infrastructure, but it is only a mitigating factor, never proof of legitimacy. Edge-only visibility also prevents independent verification of the underlying host and can mask rapid content changes.

Closing Assessment

Treat the site as read-only at most. Do not enter credentials, connect wallets, or make financial or account-related commitments here until the reputational listings are cleared and an independent source confirms who operates it.

Signals weighed against the site

• AbuseIPDB: 108 reports on hosting IP 216.198.79.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.