Is frontend-eight-alpha-37.vercel.app safe? TrustSniffer's low-trust assessment: 31/100

Overview

This website is a minimal, single-purpose login page titled "SNURM OS". It is served from a free-tier application subdomain of a commercial front-end hosting platform rather than from a standalone branded domain. The captured page exposes only a short fragment of text and three password-entry forms. It describes no products, company, or business model. Its apparent purpose is an account-access portal for a web application, most likely a development or staging deployment.

Scam/Impersonation Risk

The site is on an external threat-intelligence blacklist. Of the multi-engine reputation scans, one engine returned a malicious detection and two returned suspicious detections. This is a confirmed adverse reputational finding and the decisive driver of the cautionary posture. It is compounded by the page's function: a login surface with three password forms, on an unbranded subdomain with no visible brand, operator, or explanation. That is the structure on which credential-harvesting pages are commonly built. No conflicting legal identities, brand impersonation claims, or wallet-drainer, clipboard-hijack, hidden-form, or cloaking behaviour were observed. The sandbox recorded stable page responses and no outbound requests to third parties. Those observations argue against active data exfiltration during testing, but they do not offset the blacklist. A page that behaves quietly in a sandbox can still serve as a credential-capture front, so the site should be treated as high-risk for any sensitive interaction. Evidence:

• Login page: three password-entry forms were detected on a page carrying only a very small amount of text and the title "SNURM OS".
• Reputation sources: the domain is on an external blacklist, backed by one malicious and two suspicious engine detections.
• Sandbox behaviour: three successful runs showed no external network calls, no wallet or clipboard activity, and no cloaking.

Regulatory Verification Notes

The page discloses no legal entity, licence, registration number, terms, privacy policy, or contact route. Operator identity could not be independently connected to any real-world brand or person, and ownership is opaque because the site sits on a shared platform subdomain. For a page requesting passwords, this lack of disclosure is a material gap. It is a verification gap in its own right, but the elevated risk rests on the blacklist, not on the absence of a licence. The valid but low-assurance transport encryption and the identified hosting network show that the site is technically functional. They say nothing about who operates it. No third-party broker or regulatory record was matched. Evidence:

• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US) through the Vercel platform.
• Transport encryption: the TLS certificate is a domain-validated certificate issued by WR1, valid to 2026-11-27 (32 days remaining). Domain validation confirms control of the hostname only, not operator identity.
• Login page: it names no company and offers no terms, privacy, or contact pages.

What to Verify Next

Any organisation that directs users to this address should confirm, through its own official and independently sourced channels, that it issued the link. Anyone who has already entered credentials here should change them on the legitimate service and enable multi-factor authentication. The "SNURM OS" name should be checked against the vendor or project the visitor expects to access. Official support contact channels should be confirmed independently before any account activity. Evidence:

• Login page: the title "SNURM OS" is the only identifying text on the captured page.
• Blacklist status: the external blacklist listing should be rechecked against current reputation sources before any decision to engage.

Summary Verdict

The available evidence places this site in an elevated-risk category. The confirmed blacklist listing is decisive, and the site's identity remains unverified. Its technical hygiene and quiet sandbox behaviour do not outweigh that reputational finding.

Infrastructure Integrity

The site sits behind a trusted CDN/WAF on Amazon-hosted edge addresses, and the true origin server is not observable. This mitigates direct hosting exposure but cannot offset the reputational findings. Edge-only visibility also prevents independent hosting verification and could mask rapid content changes. A sizeable number of abuse reports attach to the shared provider IP serving the site. Because that address is shared platform infrastructure, those reports are discounted and are not attributed to this site.

Closing Assessment

The site should be treated as read-only at most. No credentials, personal data, or financial information should be entered, and no files should be downloaded from it, until its operator is independently identified and the blacklist listing is cleared.

Signals weighed against the site

• AbuseIPDB: 91 reports on hosting IP 64.29.17.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.