This site is not currently functional β it returns a 404 error, meaning there is nothing to interact with. More importantly, there is no information about who runs it, and the domain's ownership is hidden. Without any transparency or contact details, it's best to avoid this URL until it becomes operational and provides clear identity information.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
1
Don't enter any details
No passwords, card numbers or personal information β even if the site looks professional.
2
Close the tab
Especially if you got here from an email, text message or social media ad.
3
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
4
Warn others
Report the site and share this check with anyone who sent you the link.
Cross-referenced 25 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Jul 15, 2026.How we score β
Where the score comes from
We look at six areas. Here's how layers-api.planninglabs.nyc did in each.
70
Security
The site has a valid certificate and uses modern encryption, but it returns a 404 error, meaning there is no actual content to protect. This doesn't pose a security risk, but it confirms the site is not operational.
10
Identity
Who runs this site is completely unknown. The domain's WHOIS record is empty, no about page exists, and no company or team is named. For any site claiming to be a service, this level of opacity is a major red flag.
30
Reputation
The domain has no history in the Wayback Machine and is not listed on any blacklists. It's effectively a blank slate with no established reputation, which is typical for a very new or abandoned site.
10
Transparency
There is zero contact information, no about page, and no social media presence. There is no way to identify or reach the people behind this site, which is unacceptable for any service that expects user interaction.
30
Compliance
No privacy policy or terms of service are present. For a non-commercial API endpoint this might be excusable, but the total lack of legal disclosure combined with the 404 status suggests the site was never fully set up.
40
Infrastructure
The site is hosted on Amazon via Heroku, a common setup. DNS resolves correctly, but the absence of security headers and email handling is typical for a dead or non-functional site. No critical infrastructure issues, but nothing reassuring either.
What we checked
The 25 signals behind this report.
Security & Transport
Certificate Issuer
Let's Encrypt
Google Web Risk
Clean
SSL Certificate
Valid
Security Headers
0 of 6
Server
Heroku
TLS Version
TLS 1.3
Identity & WHOIS
About Page
Not found
Branding
Missing
Business Disclosure
Not found
Contact Info
Not found
Legal Pages
Missing
Infrastructure & DNS
DNS Blacklists
Clean
DNS Resolution
4 IP(s)
DNSSEC
Not enabled
Email (MX Records)
None
Hosting Network (ASN)
AS16509 AMAZON-02
Page Load Time
345ms
Reputation & Reach
Sitemap
Not found
Social Media Presence
None found
Structured Data
None found
Tranco Rank
Not ranked
Trustpilot
No Trustpilot profile
Web Archive History
No archive found
Website Status
HTTP 404
robots.txt
Not found
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.
If you've come across layers-api.planninglabs.nyc, you'll find nothing but a 404 error. That alone doesn't make it a scam, but it does mean the site isn't serving any real content right now. The bigger concern is that there's no way to know who built it or why. The domain's ownership is hidden, there's no about page, and no contact information anywhere. For a civic tech project like NYC Planning Labs, you'd typically find documentation, a team page, or at least a way to report issues. Here, there's none of that. The site appears to be an abandoned or misconfigured subdomain. Without any identity or transparency, there's no reason to trust it β and no reason to visit it until it's actually working and transparent about who's behind it.