coincommunitysupportedprojectboard.netlify.app: TrustSniffer assessment: 25/100

Overview

This website is a subdomain on a public static-site hosting platform. Its name, "coin community supported project board", suggests a cryptocurrency community or project-listing portal. At the time of analysis it served an essentially blank document with no title, visible text, navigation, forms, links, or product information, so it presents no stated purpose, offer, or business model. A name pointing to crypto projects combined with an empty page is the profile of a placeholder, staging deployment, or a shell that could later be filled with content.

Scam/Impersonation Risk

The principal concern is a confirmed external threat-intelligence listing. An independent reputation source rates the domain as malicious, and a second rates it as suspicious. This is a blacklist-level reputational signal attached to the domain itself, not to shared infrastructure, and it is the decisive negative finding. No conflicting legal identities, phishing forms, credential-collection pages, or wallet-connection behaviour were observed. Three automated browsing sessions produced no outbound requests to third parties, no hidden forms, no clipboard manipulation, and no cloaking, so the listing is not corroborated by observable page behaviour. That does not reduce its weight. A newly created subdomain with a crypto-flavoured name, no content, and a threat listing fits a pattern in which a page is staged and populated later, so the blank page offers no assurance about what it will serve next. The site also gives no basis for connecting it to any real-world person or organisation. Evidence:

• Homepage: the captured document contained no title, metadata, text, links, forms, or scripts, and the page was classified as empty with no identifiable product.
• Reputation checks on the domain: one engine returned a malicious verdict and one a suspicious verdict, and the combined result confirms the external listing.
• Domain provenance: the subdomain is about 32 days old (0.09 years), and the web archive holds only 2 snapshots, from 2026-09-19 to 2026-09-22, which is 1 year tracked.
• Sandbox behaviour: 3 of 3 runs completed with zero external network activity and zero console errors.

Regulatory Verification Notes

The captured homepage carries no legal-entity name, terms, privacy policy, licence or registration reference, or contact details. For a site whose name implies cryptocurrency project listings, which is a regulated-adjacent activity, nothing on the page establishes who operates it or under what authority. These are verification gaps, not proof of wrongdoing. No third-party broker or regulatory-database entry matched the domain, so no external licensing context exists either way. The site's own claims cannot be credited, because it makes none. The valid organisation-validated certificate belongs to the hosting platform, not to the site's operator, and it demonstrates encrypted transport rather than operator identity. Evidence:

• Homepage: no company name, jurisdiction, licence number, or regulator reference appeared in the captured content.
• No terms, privacy, or about pages were observable, and no external links or social profiles were found.
• Transport security: the TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, and valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), which reflects the platform's infrastructure and says nothing about the operator.

What to Verify Next

Any contact with this site should begin with establishing who runs it. Ask the party that supplied the address to confirm the domain through an independent, offline channel, such as an official project site or announcement already known to be authentic. Obtain a legal entity name and licensing or registration details from that party and check them against the relevant regulator's public register. Confirm the official support and contact channels the same way. Re-assess the domain only after it serves substantive content and the external listing has been cleared. Sensitive actions should wait until then. Evidence:

• Homepage: no identity, licensing, or contact information was observable to check against any registry.
• The domain is roughly a month old with minimal archive history, so no track record exists to rely on.
• Reputation checks currently list the domain, so the listing should be re-tested before any change in posture.

Summary Verdict

The available evidence supports an elevated-risk, clearly cautionary posture. The domain is very new, has no substantive content or attributable operator, and carries a confirmed adverse external reputation signal. No observable behaviour contradicts that signal. Technical hygiene is intact, but it does not offset the reputation finding or the absence of any identity or purpose.

Infrastructure Integrity

The site runs on shared cloud-platform infrastructure behind a content-delivery layer, and every observed address is a provider edge node, so the true origin server cannot be seen. This protection is a mitigating factor only and neither confirms legitimacy nor offsets the domain-level threat listing. It also means content can be swapped without any visible change in hosting. Two abuse reports were recorded against one of the shared edge addresses. They relate to the provider's shared network rather than to this site, so they are discounted and carry no weight in the assessment.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any payment or financial interaction. Passive viewing is the most that is appropriate, and nothing should be downloaded from it. Anyone directed here should seek the project's official channels through an independent route.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.