Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
click-todt.vercel.app is low-trust and potentially risky.
| What this site appears to be | The page displays only a 'Deployment Unavailable' error message with a request identifier and no service content, so its purpose cannot be determined. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 80 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is a project-style subdomain on a public application-hosting platform. It shows a visitor only a "Deployment Unavailable" error screen, with the message that the deployment is unavailable and a request identifier. It has no products, pricing, branding, navigation, forms or service description, and no business model is visible. Its apparent purpose cannot be determined from what is served.
Scam/Impersonation Risk
A confirmed adverse reputation signal is the decisive finding. An external threat-reputation source currently flags the site as malicious, and a second detection marks it suspicious, so the site is blacklisted and the report takes a cautionary posture. The site's name closely resembles the hosting platform's own domain, which points to a possible lookalike. That is a similarity indicator only, because the page makes no brand claims and no impersonation or phishing behavior was observed. No conflicting legal identities appear, since the page names no entity at all. Abuse reports exist against an address in the hosting provider's shared delivery network. Those reports reflect the many unrelated tenants on that infrastructure and are discounted, so they are not treated as evidence against this site. The error page contains no login form, hidden form, wallet prompt or outbound link, and a short automated browsing session found no external network activity or cloaking. The risk therefore lies in the external threat listing and in what the subdomain could serve once a deployment is restored or swapped. The page's current behavior is not the concern. Evidence:
- Homepage: shows only a "Deployment Unavailable" message with a request identifier, and the capture returned an HTTP 451 status.
- Reputation checks: one malicious and one suspicious detection against the domain, from a pool of 93 engine results, with 58 marked harmless.
- Homepage behavior: no forms, no external links, and no external requests across three successful automated runs.
- Hosting-network reports: 80 abuse reports on a shared provider address, classified as shared infrastructure and discounted.
Regulatory Verification Notes
The site discloses no operator, company name, licence or registration number, and has no legal, terms, privacy or contact pages. Because the only served content is an error screen, this reflects the absence of any real site content. It is not a deliberate omission, and by itself it is not evidence of wrongdoing. The real-world operator is unverified, so no claim of legitimacy can rest on this site. No third-party broker or regulatory-registry match exists for the domain. The transport-layer facts are routine and do not establish who runs the site. Evidence:
- Homepage and site structure: no legal entity, licence claim or policy pages are present.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), registry ARIN.
- Transport encryption: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27.
- Third-party broker dataset: no match for this domain.
What to Verify Next
Treat the current deployment state as unknown until the intended operator is identified through an independent route. Any later live content should be re-assessed from scratch. Confirm with the party that shared the link that the address is intentionally theirs, using a channel other than the one that delivered the link. Check the official channels of the platform or brand the name resembles to see whether this subdomain is listed. Re-examine the external threat listing after some time to see whether it persists, clears or relates to a different deployment. Confirm any support or contact channel through an independent, offline source before relying on it. Evidence:
- Homepage: no operator identity or brand claim exists to cross-check.
- Site name: a strong lookalike resemblance to the hosting platform's domain.
- Reputation checks: the adverse detections are current and unresolved.
Summary Verdict
The site carries an elevated risk posture. A confirmed external threat listing and a lookalike naming pattern outweigh the benign technical hygiene and the inert error page. The site's identity and intent are unverified, and nothing in the evidence supports treating it as a trustworthy counterparty.
Infrastructure Integrity
The site resolves to Amazon-operated address space (AS16509) and is delivered through its hosting platform's trusted CDN/WAF edge. All observed addresses are edge servers, and no origin address is visible, which prevents independent hosting verification. This edge-only visibility also means content can be swapped on the same address without any change in network footprint. The protective infrastructure and the valid TLS certificate are mitigating factors only. They do not offset the active reputation risk and do not establish who operates the site.
Closing Assessment
The site should be used, if at all, for passive viewing only. Credentials, account sign-in, personal data and payments should not be entered or sent through it, and nothing should be downloaded from it. Anyone who received the link in an unsolicited message should treat it with suspicion and not interact further.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, registration and ownership.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Page content
- The page has very little readable content.Page content
rule:PAGE_CONTENT_THIN - The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 80 reports on hosting IP 64.29.17.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of click-todt.vercel.app.
- The request stayed on click-todt.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.3 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 6 |
| Edge IP addresses | 6 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 80 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about click-todt.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.