Is api.vercel.com a scam?

Our automated security review found no threat indicators on api.vercel.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is api.vercel.com safe to use?

api.vercel.com passed our automated security checks with a trust score of 89/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does api.vercel.com have a valid SSL certificate?

Yes. api.vercel.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R12, expiring in 57 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the api.vercel.com domain?

api.vercel.com is 26.7 years old, registered on 10/4/1999 through Amazon Registrar, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has api.vercel.com been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report api.vercel.com as clean.

Is api.vercel.com on any phishing or malware blacklists?

No. api.vercel.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is api.vercel.com hosted?

api.vercel.com resolves to an IP operated by Vercel, Inc in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the api.vercel.com report updated?

This is a permanent record of the scan run on June 24, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around api.vercel.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is api.vercel.com legit or a scam?

Our verdict:Safe· 89/100

SafeSuspiciousDangerous

The official Vercel REST API endpoint and documentation site, backed by a verified global technology company with no security risks detected.

Why we trust it

Official infrastructure for a multi-billion dollar technology company.Domain age of over 9,700 days indicates long-term stability.Zero detections across 92 antivirus engines in our network.

api.vercel.comScanned 1h ago

Post Facebook

Trust score

SAFE

Heuristics 74·MT 95

Technical red flags (1)

Impersonates OpenAI / ChatGPT

Warning signals (1)

Redirects to another domain

Positive signals (5)

Antivirus clear Not on major blacklists Domain is 27 years old Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

27 years old

Registered Oct 4, 1999

MT Intelligence

Safe

Low likelihood · 100% confidence

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

LIVE RENDER

api.vercel.com

1Impersonates OpenAI / ChatGPT

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust95/100

MT AgentLive web researchVisual inspection

Confidence

The domain is the verified infrastructure endpoint for Vercel Inc., a well-established American technology company. Our analysis confirms the domain has been registered for over 26 years, which is consistent with long-term corporate ownership. All technical signals are clean, with zero flags from our antivirus partners and a perfect reputation score for the hosting IP. While some automated tools might flag the mention of AI services as impersonation, this is a false positive; Vercel provides official integrations and SDKs for major AI providers like MT Intelligence. The site serves as a technical resource for developers to manage their web deployments and accounts.

Full dossier

Analysis complete

Page Content

The page serves as the official REST API reference for Vercel. It provides technical documentation on how to interact with their cloud services, including deployment management, domain configuration, and environment variables. The content is highly technical and matches the official documentation found on their primary website.

Infrastructure

The site is hosted on Vercel's own high-performance network infrastructure. It uses a valid SSL certificate from Let's Encrypt and follows standard REST architecture. The hosting IP has a perfect reputation with no history of abuse or malicious activity.

Domain History

The domain has been registered for nearly 27 years, predating the current brand name. This longevity is a strong indicator of legitimacy, as it represents a long-held corporate asset. The registrar is Amazon Registrar, which is typical for large-scale cloud infrastructure.

Web Reputation

Vercel is a top-tier technology provider trusted by major global brands. Our research confirms that api.vercel.com is the documented, official base URL for their API services. There are no scam reports or security warnings associated with this specific subdomain across any major threat intelligence feeds.

Risk Factors

Automated systems may misinterpret official AI integrations as brand impersonation.
The page lacks a direct contact email, which is standard for technical API documentation pages.

Positive Signals

Official infrastructure for a multi-billion dollar technology company.
Domain age of over 9,700 days indicates long-term stability.
Zero detections across 92 antivirus engines in our network.
Verified business registration for Vercel Inc. in Delaware and California.
Perfect IP reputation with no abuse reports.

AI Recommendation

This site is safe. You can securely use this API endpoint and follow its documentation for your web development projects.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for api.vercel.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

26 yrs

Registered Oct 1999

Business registration

Active · United States

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

15 positive

Key findings

7 headline facts from open-web research

All official Vercel REST API endpoints are hosted at https://api.vercel.com (confirmed in Vercel documentation: "All endpoints live under the URL `https://api.vercel.com` and follow the REST architecture." [web:9][web:45])
Vercel Inc. is a legitimate, well-established company (founded ~2015, Delaware incorporation, raised significant funding, trusted by OpenAI, Meta, etc.) with active business registration. [web:36][web:42][web:44][web:46]
The domain age of 9760 days (~26.7 years) predates Vercel (rebranded ~2018 from ZEIT), consistent with it being a long-held infrastructure domain.
Vercel hosts an abuse reporting system and actively receives reports of phishing sites deployed on customer *.vercel.app subdomains; no reports target api.vercel.com itself. [web:0][web:1][web:3][web:5][web:6]
api.vercel.com is used for official purposes including deployments, integrations, AI Gateway, access tokens (Bearer auth), and team management. No scam or phishing reports found specifically for this exact domain. [web:10][web:19][web:27]
Scamadviser and similar tools rate vercel.com positively; no negative ratings found for api.vercel.com. The "OpenAI / ChatGPT (impersonation)" flag appears inconsistent with verified official documentation. [web:37]
Vercel provides official OpenAI integration, AI SDK, and AI Gateway that proxies OpenAI-compatible endpoints — legitimate technical relationship, not impersonation. [web:14][web:27][web:30]

Business registration

Status: active · United States

Vercel Inc., incorporated in Delaware (company number 3840731 / CIK 0001893137), headquartered in California (Santa Clara / Covina addresses listed). Official legal entity behind vercel.com.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for api.vercel.com and found no scam reports or complaints. Instead, we found extensive documentation on vercel.com confirming this is their official API endpoint. Business records for Vercel Inc. show an active, legitimate corporation based in the United States that is widely trusted in the software industry.

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious60Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbers26528938

Postal addressNot listed

Linked social profiles5

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No postal address visible on the page.
Page impersonates OpenAI / ChatGPT on a non-official domain.

Phone number listed (26528938).
Links to 5 social profiles.

Domain & Encryption

Domain History

Age27 years old

RegistrarAmazon Registrar, Inc.

RegisteredOct 4, 1999

ExpiresOct 4, 2029

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · R12

ExpiresAug 21, 2026 (57d)

Self-signedNo

Hosting & Technology

HostingVercel, Inc

Server locationUS

Web serverVercel

Redirect Chain

Hops

Cross-domain

Yes

Lookalike

Punycode

1308http://api.vercel.com/
2308https://api.vercel.com/
3308https://vercel.com/docs/apicross-domain
4200https://vercel.com/docs/rest-apicross-domain

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPVercel, Inc

Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on api.vercel.com and not a lookalike like a-pi.vercel.com.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

vercel-docs.vercel.sh vercel.com assets.vercel.com v0.app community.vercel.com skills.sh eve.dev streamdown.ai security.vercel.com vercel-status.com github.com x.com linkedin.com youtube.com instagram.com

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on api.vercel.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
api.vercel.com passed our automated security checks with a trust score of 89/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
Yes. api.vercel.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R12, expiring in 57 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
api.vercel.com is 26.7 years old, registered on 10/4/1999 through Amazon Registrar, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
No. All 92 antivirus engines in our malware network report api.vercel.com as clean.
No. api.vercel.com is not currently listed on the major browser blocklist feeds that modern browsers use.
api.vercel.com resolves to an IP operated by Vercel, Inc in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 24, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around api.vercel.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·api.vercel.com

SAFE

This is the official REST API documentation and endpoint for Vercel, a legitimate cloud platform for web developers. It is a critical piece of internet infrastructure used by millions of developers and is entirely safe to use.

This site is safe. You can securely use this API endpoint and follow its documentation for your web development projects.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

fertilizerbrokerage.com

13m ago

Read the review

Safetrust90

static.cdn.adtarget.biz

elementcattos.miraheze.org

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.