Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
node-live-6882-d3kx2ei95-vercel-project-key.vercel.app is low-trust and potentially risky.
| What this site appears to be | A hosting-platform error page stating that the deployment is unavailable, with a request identifier and no visible service content, forms, links, or offers. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 86 reports; shared hosting inflates reports | Clear |
| Domain age | 15 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a bare hosting-platform error page on a long, randomly generated subdomain of a public app-hosting service. The page reads "Deployment Unavailable" with a request identifier. It shows no products, navigation, forms, legal text or contact details, so it has no visible purpose or business model. The underlying service it was meant to front cannot be determined from what it shows.
Scam/Impersonation Risk
Hard contradictory signals are present. The domain is flagged on an external blacklist, and the page analysis also flags a strong lookalike resemblance to the hosting platform's own domain. Nothing on the page itself is deceptive. It has no login form, no hidden forms, no wallet prompts, no clipboard manipulation and no outbound network activity. That means the risk comes from reputation and provenance, not from observed malicious behaviour on the page. A throwaway-style subdomain that is both newly created and externally flagged is the pattern commonly used to stage phishing or redirect infrastructure, and the unavailable deployment may be a placeholder or a taken-down payload. Abuse reports against the hosting IP were also reviewed. They apply to a shared address used by many unrelated tenants of the platform and are discounted, so they are not treated as evidence against this site. No conflicting legal identities appear, and none of the signals indicate a compromised-site malware listing.
- Homepage: renders only a "Deployment Unavailable" notice (about 92 characters of text) with a request identifier, and the page was captured with an HTTP 451 status.
- Threat-intelligence screening: one engine rates the domain malicious and another rates it suspicious, which produced the external blacklist hit.
- Domain provenance: the domain is about 15 days old, with a single archive snapshot dated 2026-10-03 and no earlier history.
- Behavioral sandbox: 3 of 3 runs completed with zero external requests, zero forms and no cloaking detected.
Regulatory Verification Notes
The page carries no legal entity name, licence, registration number, terms, privacy policy or contact channel, so there is nothing on it to assess. That is a verification gap, not proof of wrongdoing on its own. It carries weight here only because of the blacklist signal above. No third-party broker or regulatory-database match exists for this domain, and the site makes no licensing or regulated-activity claims. The real-world operator is therefore unattributed, and the evidence does not connect the site to any identifiable business or person.
- Homepage: no company name, licence, address or policy pages, and no outbound links of any kind.
- Hosting: served from AS16509 (Amazon-02, US) at the edge address 64.29.17.195, within a US ARIN-registered range.
- Transport encryption: TLS certificate issued by WR1 (domain-validated only, so it confirms control of the hostname and not any organisation), valid to 2026-11-27 with 39 days remaining.
- Third-party broker dataset: no match for this domain.
What to Verify Next
Verification should start with the party that issued or shared the link. The sender should confirm in writing, through a channel independent of the link, that they published this exact address and what service it was meant to deliver. The legitimate service should be reached through its official, independently sourced address, not through this subdomain. If the sender cannot be identified, the link should be treated as unattributed and not followed further. Re-checking the threat-intelligence status after the deployment is restored or removed would show whether the flag clears or whether a payload appears. Any security team handling the link should report the lookalike resemblance and blacklist hit to the hosting platform's abuse desk.
- Homepage: the unavailable-deployment notice leaves the intended service unidentified, so the sender's confirmation is the only route to establishing purpose.
- Contact channels: none are published on the site, so any support or contact route must come from outside it.
- Domain provenance: the recent registration and single archive capture mean no historical content is available for comparison.
Summary Verdict
The site sits in a clearly cautionary, elevated-risk posture. External threat detections are decisive and outweigh the technically clean sandbox behaviour and valid encryption. The site is a newly created, unattributable endpoint with no substantive content to build trust on. It is not a confirmed phishing site or a demonstrated scam, but nothing about it supports confidence.
Infrastructure Integrity
The site is served entirely from content-delivery edge addresses on a mainstream cloud network, with a valid TLS certificate and no suspicious DNS characteristics. The origin server is not observable, so the underlying host cannot be independently verified and the content behind the edge could change quickly without notice. This protective infrastructure is a mitigating factor only. It shows where the page is served from, not who runs it, and it does not offset the external reputation signals.
Closing Assessment
Passive viewing is the only reasonable interaction at present. Credentials, logins, payment details and wallet connections should not be entered on this address, and nothing should be downloaded from it. Any request that directs a user here should be treated as unconfirmed until the sender is verified through an independent channel.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, page content, registration and ownership.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
04 Page content
- The page has very little readable content.Page content
rule:PAGE_CONTENT_THIN - The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
05 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 86 reports on hosting IP 64.29.17.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of node-live-6882-d3kx2ei95-vercel-project-key.vercel.app.
- The request stayed on node-live-6882-d3kx2ei95-vercel-project-key.vercel.app. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2026-10-03. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.195 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-10-03 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 86 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about node-live-6882-d3kx2ei95-vercel-project-key.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.