Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
coinmrkp-vote-ver-52.netlify.app is low-trust and potentially risky.
| What this site appears to be | Netlify hosting 404 'Site not found' error page with no site content, forms, or business activity visible. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 2 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This web address is a subdomain on the Netlify hosting platform. It currently serves only the platform's generic "Site not found" error page, which says the visitor followed a broken link or entered a URL that does not exist. The page shows no products, services, pricing, contact details, or business activity. The hostname reads like an abbreviation of a well-known crypto-asset ranking brand followed by "vote" and "ver" tokens, a naming pattern typical of voting and verification lures. The site's actual purpose and business model cannot be determined from what it displays.
Scam/Impersonation Risk
Contradictory signals are present. A threat-intelligence listing currently flags the site as blacklisted, with one engine rating it malicious and another rating it suspicious. This is the decisive negative signal. Two abuse reports exist against a shared platform address in the hosting provider's range. These are discounted and not attributed to the site's operator, so they do not add weight. Behavioral testing shows the site does not behave like a static error page. In every test run, hidden forms were present, including password-type fields. Page content mutated heavily after interaction, and nearly all network activity went to external destinations. A 404 stub should have none of these. This is consistent with a placeholder or decoy that can be swapped for a credential-collection page, and it is the kind of behavior seen in vote-and-verify lures aimed at crypto users. Conflicting legal identities and confirmed phishing content were not observed, and no wallet-connection or clipboard-manipulation behavior was detected. The captured page itself shows no explicit deception. The risk therefore comes from the listing combined with the concealed form behavior. Evidence:
- Homepage, behavioral testing: hidden forms detected in 3 of 3 runs, with password fields present in each.
- Homepage, behavioral testing: up to 4,130 DOM mutations after interaction on a page whose visible text is 368 characters.
- Homepage, network telemetry: 34 external requests (14 external XHR/fetch, 20 external POSTs), with up to 99.6% of activity directed off-site in a single run.
- Reputation checks: one malicious and one suspicious detection recorded against the domain.
Regulatory Verification Notes
The site presents no legal, corporate, or licensing information. The only page captured carries no company name, registration number, terms, privacy policy, or regulator reference, so no licensing claim exists to assess. This is a disclosure gap of the page, not proof of fraud on its own. Real-world operator identity remains unverified, and ownership and governance are opaque. The TLS certificate is organization-validated, but it names the hosting platform as the subject, not the site's operator. It confirms encrypted transport and the platform's identity only, and it says nothing about who runs this subdomain. No third-party broker or regulator profile was matched to the site. Evidence:
- Homepage: contains only the platform's error text, with no legal entity, license, or policy content.
- Transport layer: certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organization Netlify, Inc, valid to 2027-03-19.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
What to Verify Next
Anyone who received this address through a message, social post, or advertisement should treat the source as suspect and not use the link. If the hostname invokes a brand's voting, listing, or verification campaign, confirm the campaign directly on that brand's official website, reached by typing its known address or using a saved bookmark. Official brands do not normally run such campaigns from free-tier hosting subdomains. Any claim of a licensed or regulated service should be checked in the relevant regulator's public register, using the entity name published there. If the site was delivered through a third party, confirm the sender's identity through an independent channel. A report to the hosting platform's abuse desk is also appropriate. Evidence:
- Hostname: abbreviated brand-like token plus "vote" and "ver" tokens on a shared free hosting domain, with no brand-owned domain involved.
- Homepage link graph: no internal or external links and no social-media presence to cross-check.
- Homepage metadata: no page title of its own, no meta description, and no structured data.
Summary Verdict
The site sits in an elevated-risk posture, driven by an active external threat listing and concealed form behavior that is inconsistent with its visible content. Nothing observable establishes a legitimate operator or a purpose, and the operator's real-world identity is unverified. Technical hygiene such as valid encryption does not offset this, so the site cannot be treated as legitimate.
Infrastructure Integrity
The site is delivered through Amazon-operated edge infrastructure, and all four observed addresses are edge nodes. The origin server was not observable. The platform's certificate and mainstream hosting are mitigating factors only. They show the site is hosted on a reputable platform, not that this particular tenant is trustworthy. Edge-only visibility also prevents independent hosting verification and can mask a rapid swap of content behind the same address. Infrastructure protections cannot offset the reputation risk already established.
Closing Assessment
The site should be treated as untrusted. Passive viewing is the only reasonable interaction. Credentials, seed phrases, wallet approvals, and payment details should not be submitted, and nothing should be downloaded or installed from it. Anyone who has already interacted with it should change affected passwords, review wallet permissions, and report the link to the platform's abuse team.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, page content.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
03 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
Signals weighed against the site
- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of coinmrkp-vote-ver-52.netlify.app.
- The request stayed on coinmrkp-vote-ver-52.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 2 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about coinmrkp-vote-ver-52.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.