Is crates-otcdesks.xyz a scam? TrustSniffer's high-risk assessment: 5/100

crates-otcdesks.xyz
Download PDF Check another site How we score

Verdict

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

5 OUT OF 100
Critical Risk

crates-otcdesks.xyz shows high-risk / scam indicators.

Sensitive Interaction Risk Governance Risk

Assessed 2026-10-19 by automated analysis. Classification confidence 55%.

What this site appears to beLanding page for the OTC token's Holder Crates program advertising reward allocations (percent ranges up to ~21%), metrics (rewards distributed, fees, buybacks), and instructions to hold $OTC in a Solana self-custody wallet to be eligible for snapshot-based claims. Promotional figures shown without embedded audits or regulatory/legal identity on the page.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware enginesNone flagged itVirusTotalClear
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reportsClear
Domain age26 days oldMost scam domains are under a year oldRisk
Web archiveNever archivedNo public history of this siteWatch
CertificateEncrypted connectionIssued by YE1Noted

The page as captured

https://crates-otcdesks.xyz/
Screenshot of the crates-otcdesks.xyz homepage captured during the TrustSniffer assessment
What crates-otcdesks.xyz served when TrustSniffer captured it on 2026-10-19. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • Domain age: less than 1 year (registration continuity).
  • No flags from the reputation services TrustSniffer consulted at assessment time.

Full analysis

Overview

This website is a cryptocurrency token-rewards landing page for the OTC project, presenting “Holder Crates” that allocate rewards to holders of $OTC based on balance and holding duration, with claims intended for wallets on the Solana network.

Scam/Impersonation Risk

No confirmed blacklist, phishing, impersonation, or conflicting legal-identity signals were observed. The principal concern is the site’s high-stakes promotional model: the homepage presents reward allocations ranging from 10% to 21%, including a 14.7% illustrative allocation, alongside claims of protocol revenue distribution, rewards distributed, fees generated, and buybacks. These figures are expressly promotional, but the page provides no embedded audit or equivalent evidence supporting the stated value flow. One external reputation check returned a suspicious result, while malicious and blacklist indicators were not present; this remains an unconfirmed reputational signal rather than proof of malicious conduct. The site’s very recent registration further limits confidence in its operating history.

Evidence
  • The homepage advertises $OTC Holder Crates, allocation rates of 10%–21%, and a 14.7% illustrative reward rate, while stating that the figures have no guaranteed value.
  • The homepage reports “$1.8M” in rewards distributed, “$2.6M” in fees generated, and “$139K” in buybacks without presenting an embedded audit.
  • The domain registration record shows 2026-09-23 creation and an age of 0.07 years (~26 days).
  • External reputation telemetry recorded 1 suspicious result, 0 malicious results, and no blacklist hit.

Regulatory Verification Notes

The available page content does not identify a legal entity, licensing authority, registration number, or regulatory basis for the reward and token activities. That is a material verification gap for a program presenting financial or quasi-investment returns, although the omission alone does not establish impersonation or fraud. The operator’s real-world identity is not independently verified; the available identity signal is limited to one trusted social presence. Registration was handled through Hosting Concepts B.V. d/b/a Registrar.eu, and the site uses valid domain-validated transport encryption, but neither fact establishes regulatory authorization.

Evidence
  • The homepage describes protocol-revenue distributions and holder rewards but contains no stated legal identity, license, or registration number.
  • The homepage links to a Twitter social domain, representing the available social-presence signal.
  • The domain is registered through Hosting Concepts B.V. d/b/a Registrar.eu.
  • The site’s TLS certificate is issued by YE1 at DV validation level and is valid to 2026-12-22.

What to Verify Next

An independent check should identify the operating legal entity and confirm whether the token, reward, and revenue-distribution activities require authorization in the relevant jurisdictions. The stated revenue, rewards, buybacks, allocation mechanics, and wallet-claim process should be reconciled against independently verifiable on-chain records and audit materials before any financial commitment. Official contact and support channels should also be confirmed through an independent route rather than relying solely on the website.

Evidence
  • The homepage provides promotional financial metrics without an embedded audit or independently identified legal operator.
  • The homepage describes snapshot-based eligibility and on-chain claiming through a self-custody Solana wallet.
  • The site’s stated reward mechanics and value flow are presented as promotional claims rather than independently validated disclosures.

Summary Verdict

The overall posture is critical and unsuitable for sensitive interaction. The available evidence supports treating the site as an unverified crypto-rewards operation with substantial financial and identity uncertainty, despite the absence of confirmed impersonation or blacklist findings.

Infrastructure Integrity

The website is served through Cloudflare’s CDN/WAF infrastructure, with observed edge hosting on AS13335 operated by Cloudflare, Inc.; the origin server was not observable in this analysis. This provides a meaningful layer of network protection but is only a mitigating infrastructure characteristic and does not validate the operator, token economics, or financial claims.

Closing Assessment

Restrict activity to non-interactive review until independent legal, operational, and on-chain verification is complete; sensitive access, credential submission, and financial commitment should not proceed on the basis of the website’s promotional claims alone.

Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

3 findings contributed to this verdict, raised by page content, hosting and network, several checks together.

01 Page content

  • The review of the page content rated it high risk.Page content rule:PAGE_RISK_HIGH
  • The page shows few of the signs expected from a trustworthy operator.Page content rule:PAGE_TRUST_QUALITY_LOW
  • The page content shows three or more warning signs that deceptive sites commonly use.Page content rule:PAGE_RED_FLAGS_STRONG
  • The page content shows at least one warning sign that deceptive sites commonly use.Page content rule:PAGE_RED_FLAGS_SOME

02 Hosting and network

  • The domain was registered less than three months ago.Hosting and network rule:DNS_NEW_DOMAIN_90D

03 Several checks together

  • No external feed lists the site, but its own page content reads as risky.Several checks together rule:HYB_POSITIVE_EXTERNAL_NEGATIVE_PAGE

Identity verification

StatusLIKELY
Identity score73/100
Identity verification confidence37%
  • Trusted social count=1

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of crates-otcdesks.xyz.

  • The request stayed on crates-otcdesks.xyz. It was not redirected to another domain. Clear
  • Registration is published under Hosting Concepts B.V. d/b/a Registrar.eu. Clear
  • DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
  • The registration is paid up to 2027-09-23. Noted
  • It is hosted on CLOUDFLARENET, from a server in US. Noted

Domain intelligence

RegistrarHosting Concepts B.V. d/b/a Registrar.eu
HostingCLOUDFLARENET - Cloudflare, Inc., US
CountryUS
Server IP2606:4700:3035::6815:4cf2
Name serversLINDA.NS.CLOUDFLARE.COM, SULLIVAN.NS.CLOUDFLARE.COM
CDN / edge networkDetected (cloudflare)
Resolved IP addresses4
Edge IP addresses4
Likely origin IP addresses0
SSL issuerYE1
SSL expiry2026-12-22
Domain age0.07 years (continuous registration)
Domain expiry2027-09-23
Archive first seenNot available
Archive snapshots0
ReputationVirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about crates-otcdesks.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about crates-otcdesks.xyz

Is crates-otcdesks.xyz a scam?

TrustSniffer's assessment of crates-otcdesks.xyz found strong scam indicators. It scored 5 out of 100 on 2026-10-19, which is the critical-risk band. The specific signals are listed in the evidence above.

Is crates-otcdesks.xyz safe to use?

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

What is the trust score of crates-otcdesks.xyz?

crates-otcdesks.xyz scored 5 out of 100 on 2026-10-19, which places it in the critical-risk band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-19 · how we assess · report a mistake