Is crypto-0r4.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Overview

This website is a subdomain on a managed static-hosting platform whose name suggests a cryptocurrency-related project. At the time of analysis its landing page showed only the platform's default "Site not found" error, saying the requested path does not exist. It presents no products, pricing, company description, contact details or calls to action, and no business model is visible. Its apparent purpose therefore cannot be established from the content, which is an empty placeholder or an unpublished deployment.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is cautionary. External reputation sources currently flag the site: one detection engine rates it malicious and another rates it suspicious. This is the decisive factor, and the site must be treated as blacklisted by external intelligence. The reputation risk is not offset by the valid encryption certificate or the reputable hosting. The visible content is also inconsistent with what the site did when exercised. The homepage shows a bare error message with no forms, yet automated sessions detected concealed forms, including password-type fields, in every run. Large page-structure changes followed interaction, far more than a static error page should produce. A hidden credential-capture mechanism behind a placeholder front is a recognised pattern, although no phishing page or confirmed impersonation was observed. The page's name similarity to the hosting platform's own domain was also flagged as a possible brand lookalike. That signal is weak, because the visible content is the platform's genuine default error text. Two abuse reports exist against a shared edge address, but they are attributed to the provider's shared infrastructure and are given no weight against this site. No conflicting legal identities were observed, since no identity content exists to conflict. Evidence:

• Homepage: shows only the platform's "Site not found" message, with no forms, login prompts, financial claims or contact artifacts in the visible content.
• Automated browsing sessions (3 of 3 runs): detected 3 hidden forms, including password fields, on a page that visibly offers none.
• Automated browsing sessions: recorded 4,130 page-structure mutations after interaction, which is anomalous for a static 404 page.
• Domain provenance: first observed 2026-10-05 (~15 days old), with 1 archive snapshot in 2026 (1 year tracked), so there is no established history.

Regulatory Verification Notes

The site carries no legal, terms, privacy or about content, so no operator, company, jurisdiction, licence or registration is stated. The real-world operator is therefore unverified, and ownership and governance are opaque in a way that cannot be resolved from the site. The hosting platform's name appears on the error page, but this identifies the platform, not the operator. No third-party broker or regulatory-database match was found, so there is no external reputational signal on this point. If the site later presents financial or crypto-related services, none of its claims could be treated as authorised or regulated without independent confirmation. Evidence:

• Homepage: contains no company name, licence, registration number or jurisdiction.
• Transport encryption: an organisation-validated certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19. It is held by the hosting platform and does not identify the site's operator.
• Reputation lookup: no match in the broker-reputation dataset.

What to Verify Next

Before any engagement, the operator's identity should be established through channels independent of this site. The site publishes no verifiable operator details, so any later party claiming to run it should be asked for a registered legal entity and, if financial or crypto services are offered, a licence checked directly with the relevant regulator's registry. The external detections should be re-checked after a fresh scan, to see whether they persist and whether the concealed forms remain. Any hosting-abuse report or takedown request should go through the hosting platform's abuse channel. Official contact channels should be confirmed through an independent, offline route. Evidence:

• Homepage: no operator or support information to cross-check.
• Automated browsing sessions: concealed forms in every run would need to be re-tested once real content is published.
• Domain provenance: only a single archive observation exists, so there is no prior content to compare with.

Summary Verdict

The site is assessed as low trust with elevated risk. A confirmed external reputation flag, a mismatch between its blank visible content and its concealed credential-style forms, and a very short, unverified history converge on a cautionary posture. Technical hygiene is sound but does not establish legitimacy, and the operator's identity remains unverified.

Infrastructure Integrity

The site is served through Amazon's content-delivery edge network, and all four observed addresses belong to that edge network. The origin server was not observable. This is a mitigating factor only, since it shows no abuse-oriented hosting pattern, but edge-only visibility prevents independent verification of the true host and can mask rapid content changes. The encryption certificate is valid and well-formed, but it protects transport only and says nothing about the operator's intent. Evidence:

• Hosting infrastructure: served from AS16509 (AMAZON-02, Amazon.com, Inc., US) on edge addresses, with no origin candidate observed.
• Transport encryption: OV certificate with about 149 days remaining.

Closing Assessment

The site should be limited to read-only viewing at most. Sign-in, credential entry, wallet connections and any payment or financial interaction should be avoided until the operator is independently identified and the external detections are cleared.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.