Is ndq-hunt.vercel.app safe? TrustSniffer's low-trust assessment: 41/100

Overview

NDQ666 Hunt is a single-page website published on a free subdomain of a shared application-hosting platform rather than on a dedicated, independently registered domain. Its homepage carries the title "NDQ666 Hunt" and a modest amount of text. The captured evidence does not show a clearly identified product, service, or operator, so its business purpose cannot be determined from the page itself.

Scam/Impersonation Risk

The assessment is elevated because of confirmed contradictory reputation signals. Two independent security engines classify the site as malicious and a third rates it suspicious, and a broader external blacklist corroborates these detections. These are the decisive findings. No conflicting legal identities and no brand impersonation were observed, and the behavioural sandbox found no wallet-drainer activity, clipboard manipulation, hidden forms, external password submission, or cloaking across three successful runs. Abuse reports exist against an address belonging to the hosting provider's shared network. They apply to many unrelated tenants and have been discounted. They are not attributed to this site and play no part in this conclusion. The homepage did generate fifteen background requests to external destinations, three of them to non-whitelisted hosts and one of those unclassified, which adds modestly to the concern. Taken together, the blacklist-level detections make sensitive interaction with this site inadvisable, even though the sandbox found no direct technical exploitation. Evidence:

• Homepage: security engines return two malicious and one suspicious detection, and the external blacklist check is positive.
• Domain provenance: the site is roughly 0.76 years old, and the web archive holds only 2 snapshots, dated 2026-01-20 and 2026-01-21 (1 year tracked).
• Homepage behaviour: 15 external background requests (3 non-whitelisted), 3 external POSTs, no console errors, and no wallet-provider or clipboard activity.
• Hosting-provider IP: 89 abuse reports, attributed to shared infrastructure and discounted.

Regulatory Verification Notes

The pages analysed provide no clear indication of a legal entity, licence, registration number, or accountable operator, and ownership details are incomplete. This is an ownership-opacity and disclosure gap, not an identity contradiction, and no third-party broker or regulator record matched the site. Identity has not been independently verified, so legitimacy cannot be inferred from the site's presentation. The site's mainstream hosting and valid certificate establish only that it is technically operational. They do not establish who runs it or whether it is authorised to offer anything. Evidence:

• Homepage: no company name, licence, or registration disclosure is visible in the captured content.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), registry ARIN, country US.
• Transport encryption: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27 with 32 days remaining.
• Third-party broker dataset: no match for the site.

What to Verify Next

Before any engagement, confirm through an independent route who operates NDQ666 Hunt and what it offers. Search for a named legal entity and, if financial or investment services are implied, check that entity against the relevant national regulator's register. Re-run the external reputation checks after a few days to see whether the malicious detections have been cleared or have grown. Establish the official contact channels from a source other than this site. Until the detections are resolved, any interaction should be limited to passive viewing in an isolated browser. Evidence:

• Homepage: no identified operator, so registry lookups must start from independently sourced names.
• Security-engine detections: current at the time of analysis and subject to change on re-scan.
• Behavioural run: three non-whitelisted external destinations whose purpose is unconfirmed.

Summary Verdict

The overall posture is cautionary and security-forward. The decisive factor is a set of corroborated external threat detections, which technical hygiene such as a valid certificate and consistent availability cannot offset. The site is young, thinly archived, and unconnected to any verifiable operator. The evidence supports treating it as a high-risk destination for sensitive actions, and it does not support a claim of confirmed fraud.

Infrastructure Integrity

The site is delivered through a trusted content-delivery and edge network, and all six observed addresses are edge servers within AS16509. The origin server could not be observed, so hosting cannot be verified independently. That also means content could be swapped quickly without any visible change in infrastructure. This protective layer is a mitigating factor only. It does not counter the external reputation findings.

Closing Assessment

Do not log in, enter credentials, connect wallets, or make payments on this site. Limit any visit to read-only viewing, download nothing, and reassess only if the external detections are cleared and an accountable operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 89 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.