Is newscanner-six.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website is a subdomain on a public serverless hosting platform. It currently serves only a generic "404: NOT_FOUND / DEPLOYMENT_NOT_FOUND" error page, which says the requested page or deployment does not exist and offers a documentation link and a "Copy Debug Prompt" control. A visitor sees no products, services, offers or forms, and no business model is visible. The domain appears to be a placeholder or an abandoned or removed deployment, and its apparent purpose cannot be established from what it serves.

Scam/Impersonation Risk

The evidence contains contradictory signals that justify a clearly cautionary posture. The site appears on an external reputation blacklist: one threat-intelligence engine flags it as malicious and another as suspicious. Page analysis also found a strong lookalike resemblance between the domain and the hosting platform's own well-known domain. This raises a brand-impersonation suspicion, but no content on the page makes any brand claim. The most consequential behavioral finding is strong cloaking: after simulated interaction, the page's content and appearance diverged materially from the initial render. That is consistent with a placeholder that can be swapped for different content depending on visitor behavior. During sandbox runs the page also issued a large volume of requests to external services and several outbound POST requests, all to recognized destinations. It also performed a clipboard write, although no hijacking or wallet-related activity was seen. A large number of abuse reports exist against one of the shared edge addresses. They belong to the hosting provider's multi-tenant infrastructure rather than to this site specifically, so they carry no weight against it. No phishing form, credential field, hidden form or wallet-connect behavior was detected, and no conflicting legal identities exist. The risk therefore rests on the blacklist listing, the lookalike naming and the cloaking behavior, not on any observed fraud mechanism. Evidence:

• Homepage: serves only a 404 deployment-not-found message with no forms, login fields or sensitive actions.
• External reputation: one engine reports the site as malicious and one as suspicious, corroborated by a blacklist match.
• Behavioral sandbox: three runs found strong cloaking after interaction, with about 10.5% semantic and about 8.8% visual divergence.
• Edge IP 64.29.17.131: 80 abuse reports, attributed to shared Vercel infrastructure and discounted.

Regulatory Verification Notes

The page makes no licensing or registration claims and names no company, operator, address or jurisdiction. It has no terms, privacy, about or contact pages. Because it serves only an error screen, there is nothing to assess for regulated activity, and the real-world operator is not independently connected to any brand or person. A third-party broker-reputation lookup returned no match. That is neutral and says nothing about licensing status. Absence of disclosure on a 404 page is not by itself evidence of wrongdoing, but it means no on-site basis exists for confirming who stands behind the domain. Evidence:

• Homepage: contains no company name, license number, regulator reference or legal-entity disclosure.
• Site structure: no internal or external links, and no legal or policy pages were found.
• TLS: the certificate is issued by WR1 at domain-validation level only, valid to 2026-11-27. It confirms domain control, not organizational identity.

What to Verify Next

Do not rely on this domain as a representation of any organization until the owner is identified through an independent route. Anyone who received this address from a message, advertisement or third party should confirm through the sender's official channel, obtained separately, that the link is genuine. If it claims to represent a known brand, that brand's own verified website and support channels should be used to confirm the link. The domain should be re-assessed later, because the cloaking behavior means its content may change. If the domain is one you operate, confirm whether the deployment was intentionally removed and whether the listing on the external blacklist can be remediated. Evidence:

• Homepage: the error page identifies no owner or brand to verify against.
• Reputation: the current external blacklist entry should be re-checked after any content change.
• Behavioral sandbox: content shifted after interaction, so a single snapshot cannot establish what the site does.

Summary Verdict

The overall posture is high-risk and clearly cautionary. The site shows no legitimate business content, an unverified operator, a current external blacklist entry, and behavior that suggests its displayed content can change after a visitor interacts with it. Valid transport encryption and a recognized infrastructure provider do not offset these signals.

Infrastructure Integrity

The site is served from Amazon-hosted address space (AS16509, AMAZON-02, United States) behind its hosting platform's CDN/WAF layer. All six observed addresses are edge nodes, and the transport certificate is valid. This is a mitigating factor only, because the same shared platform hosts countless unrelated tenants and says nothing about this site's legitimacy. Edge-only visibility also prevents independent verification of the underlying hosting and can mask rapid content swaps.

Closing Assessment

Interaction should be limited to read-only viewing at most. No credentials, payment details, wallet connections or personal data should be submitted, and nothing should be downloaded from this domain until its operator is identified and the external listing is resolved.

Signals weighed against the site

• AbuseIPDB: 80 reports on hosting IP 64.29.17.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.