Is eth-arbitrage-bot.vercel.app safe? TrustSniffer's low-trust assessment: 31/100

Overview

This website is a subdomain hosted on a shared application-deployment platform, under a name that suggests an Ethereum arbitrage trading bot. The page it serves to visitors is only a short "Deployment Paused" notice returned with a payment-required status. It shows no product description, pricing, team, legal pages or working application. Its apparent purpose is to front a crypto-trading tool, but nothing on the page demonstrates any actual service.

Scam/Impersonation Risk

Material contradictory signals are present, and this section carries the report's cautionary posture. Multiple independent threat-intelligence engines classify the site as malicious or suspicious, and an external blacklist also lists it. The site is therefore blacklisted by third-party sources, which is a decisive negative signal. No brand impersonation, phishing page or conflicting legal identities were observed on the captured page. That page is nearly empty, so it gives no content-level explanation for the listings. An "ETH arbitrage bot" name is a common lure for automated-profit schemes, in which victims are asked to fund wallets or deposit crypto. The paused page shows no such mechanism today, but a deployment that is paused can be reactivated or swapped for different content at any time without notice. A large number of abuse reports exist against a shared platform edge address. They are attributed to shared infrastructure used by many unrelated tenants and carry no weight against this site specifically, so they are discounted. The behavioral sandbox saw no external network calls, no wallet-connection prompts, no hidden forms and no cloaking, which limits what can be said about live malicious behavior. The blacklist signals still stand on their own. Evidence:

• Homepage: serves only a "Deployment Paused" notice with a 402 status and roughly 94 characters of text, with no offer, legal content or contact details.
• Reputation checks: 2 engines rated the site malicious and 1 suspicious, and an external blacklist also lists it.
• Abuse reports: 84 reports target the platform's shared edge address, which is flagged as a content delivery network and discounted as shared infrastructure.
• Behavioral sandbox: 3 of 3 runs completed with zero external requests, no wallet prompts and no clipboard or form anomalies. 3 console errors were logged.

Regulatory Verification Notes

The captured page contains no legal, about, terms, privacy or licensing content, so the operator cannot be tied to any named company, jurisdiction or regulatory registration from the site itself. The page offers no basis for treating any trading, investment or financial activity as authorized or supervised. Because the site names an arbitrage trading function, that absence matters: a real service in this category would be expected to disclose its operator and regulatory status. No third-party broker or regulatory-database record matches the site, and that is only a lack of corroboration, not a regulatory verdict. Independent identity verification of the operator was not achieved, so any apparent legitimacy cannot be treated as established. Evidence:

• Homepage: contains no company name, license number, registered address or policy links.
• Technical profile: served from AS16509 (AMAZON-02, US) with a DV-level TLS certificate issued by WR1, valid to 2026-11-27 (about 32 days remaining). This is hosting and encryption hygiene only, and it does not establish identity.
• DeFi directory check: no protocol listing or TVL record was found for the site.

What to Verify Next

Any prospective interaction should wait until the operator can be identified through independent, offline routes. The steps are to ask the claimed operator for its legal entity name and registration number and check them in the relevant company and financial-regulator registries, and to confirm official contact channels from a source other than this site. The paused deployment should be re-assessed before any relaunch is trusted. The listings from the reputation sources should also be checked for any later delisting. No wallet connection, deposit or credential entry should be considered while these steps remain open. Evidence:

• Homepage: gives no operator, registry or support details to check against.
• Reputation sources: the current listings are active and have not been cleared.
• Hosting profile: the site sits on a shared platform subdomain, so the account holder cannot be inferred from the address.

Summary Verdict

The site carries an elevated-risk posture. Active third-party malicious and blacklist classifications are decisive, and the near-empty content and unverified operator give no counterweight. Benign sandbox behavior and valid encryption are real but secondary, and they do not offset the reputation findings.

Infrastructure Integrity

The site is delivered through the Vercel platform on Amazon-hosted address space (AS16509, US), with several edge addresses and no observable origin server. This is protective infrastructure from a mainstream CDN. It is a mitigating factor only and is not proof of legitimacy. Edge-only visibility also prevents independent verification of what actually backs the site, and it can mask a rapid content swap behind the same address.

Closing Assessment

Treat the site as unsafe for sign-in, credentials, wallet connection or any financial transaction. Limit any contact to passive viewing until the third-party listings are cleared and the operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.