Is generate-report-sooty.vercel.app safe? TrustSniffer's moderate-trust assessment: 51/100

Overview

The site is a minimal web deployment hosted on a shared application-hosting platform subdomain. Its homepage shows only a short "Deployment Unavailable" notice of under a hundred characters. It presents no products, services, corporate identity, or interactive features, so its apparent purpose and business model cannot be determined from the content captured.

Scam/Impersonation Risk

Active contradictory signals are present. At least one external threat-intelligence source currently flags the domain as malicious, and a second rates it suspicious. This is a confirmed blacklist hit and is the decisive risk factor. No brand impersonation, conflicting legal identities, or confirmed phishing content was observed. The page also contains too little material to show what the site is being used for. A flagged domain that serves an empty placeholder can be a staging or abandoned deployment, but it can also be a dormant asset waiting for content to be swapped in. The page's HTTP response indicated restricted availability, which adds to the uncertainty. The abuse reports recorded against one of the hosting edge addresses are a different matter. They are attributed to shared platform infrastructure and carry no weight against this site. Behavioral testing found no outbound data submission, no wallet interaction, no clipboard manipulation, no hidden forms, and no cloaking. That limits observable harm but does not offset the external detection. Evidence:

• Homepage: shows only a deployment-unavailable notice, with no products, claims, or contact details.
• External reputation: one engine reports the domain as malicious and one as suspicious.
• Shared-infrastructure reports: 81 abuse reports attach to a platform edge IP (64.29.17.131) and were discounted as shared infrastructure. The reporting confidence is zero.
• Behavioral sandbox: 3 of 3 runs completed with zero external requests and no credential-capture, wallet, or clipboard activity.

Regulatory Verification Notes

The site publishes no legal, terms, privacy, or about pages, so there is no company name, licence, or registration number to assess. No financial or regulated activity is advertised, so a missing licence is not a finding in itself. Real-world operator identity has not been independently established, and the registration details are incomplete. The domain sits on a subdomain of a shared hosting platform, so the platform's own registration says nothing about the operator of this deployment. No third-party broker or regulator record matches the site. Evidence:

• Homepage: no legal-entity, licensing, or jurisdiction disclosure.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), in a US ARIN-registered range.
• Transport security: TLS certificate issued by WR1 (DV), valid to 2026-11-27, with 36 days remaining.
• Broker registries: no match found.

What to Verify Next

The blacklist flag should be re-checked directly with the listing sources to see whether it is current, which sources raised it, and whether the content that triggered it still exists. If the deployment belongs to a known counterparty, that party should be asked, through a channel independent of this site, to confirm that they own and operate it. Re-test the page later to see whether it has changed from a placeholder to live content. Confirm any official contact channels from a source other than this domain. Any click-through links from messages that pointed to this address should be treated as unverified until these checks are done. Evidence:

• External reputation: the current flag is the principal item to resolve.
• Homepage: the placeholder content may change, so a later capture should be compared with this one.
• Certificate: the TLS certificate is DV only, so it confirms domain control but not operator identity.

Summary Verdict

The site holds a middling trust position that is clearly weighed down by an active external threat detection. Its technical hygiene is sound: valid encryption, no suspicious runtime behavior, and recognized hosting. That hygiene cannot offset the reputational flag, and with so little content the site's purpose and operator remain unestablished. The overall posture is elevated risk, with caution proportionate to the confirmed detection and not to evidence of deliberate fraud.

Infrastructure Integrity

The site resolves to a set of CDN edge addresses on AS16509, operated by Amazon, behind the hosting platform's delivery layer. No origin server address was exposed. This protective layer is a mitigating factor only. It shields the origin from direct exposure, but it also prevents independent verification of the underlying host and makes rapid content swaps harder to detect. The edge addresses carry no reputational weight of their own.

Closing Assessment

Treat the site as read-only at most. Do not log in, enter credentials, or make payments or other financial transactions on it until the external flag is cleared and the operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 81 reports on hosting IP 64.29.17.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.