Is crypto-1gt.netlify.app a scam? TrustSniffer's high-risk assessment: 15/100

Overview

This is a minimal placeholder site on a free subdomain of a public web-hosting platform. The captured homepage shows only the text "redirecting.." and has no title, navigation, links, forms, or stated offering. Its subdomain label suggests a crypto-related theme, but nothing on the page supports that. No business model or economic purpose can be observed, which is typical of a redirect stub or staging page rather than a functioning service.

Scam/Impersonation Risk

Contradictory signals are present. An external reputation source has placed the site on a blacklist, and one security engine rates it malicious while another rates it suspicious. These detections apply to the site's own hostname, so they are decisive and cannot be offset by the technical hygiene noted elsewhere. Page analysis also flagged a close name similarity to the hosting platform's own brand. That is expected for a subdomain of that platform, and it is not a confirmed impersonation of any specific organization. A redirect-only page with a crypto-flavoured hostname fits the pattern of staging infrastructure for a redirect chain, which is commonly used to forward visitors to a different destination. The captured visits showed no outbound requests, hidden forms, wallet prompts, clipboard manipulation, or cloaking, so no active exploitation was seen during analysis. Two abuse reports exist for one of the shared addresses serving the site. They are discounted because they relate to infrastructure shared with many unrelated tenants, not to this site specifically. No conflicting legal identities were found. Evidence:

• Homepage: contains only a 13-character "redirecting.." message, with no title, metadata, links, or forms, and was flagged as a redirect placeholder.
• Reputation: a blacklist listing is confirmed, with one malicious and one suspicious engine verdict on the hostname.
• Domain provenance: first observed in 2026, about 16 days old, with 1 archive snapshot spanning one year of tracking.
• Behavioral sandbox: 3 of 3 runs completed with zero external requests, no hidden forms, and no wallet or clipboard activity.

Regulatory Verification Notes

The site claims no license, registration, regulator, or legal entity, and it has no terms, privacy, about, or contact pages. Because there is no content, the real-world operator cannot be linked to any organization or person, and its identity remains unverified. This is a verification gap, not proof of wrongdoing, but here it sits alongside confirmed adverse reputation signals. No broker-reputation match was found, and no third-party regulatory standing was established. The site's transport encryption is valid and organisation-validated, but the certificate belongs to the hosting platform. It shows that the platform's own encryption is in place and says nothing about this site's operator. Evidence:

• Homepage and site structure: no legal, terms, privacy, or company-identification pages were captured.
• Hosting: served from AS16509 (Amazon, AMAZON-02, US).
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19.
• Broker intelligence: no match found in the third-party broker dataset.

What to Verify Next

Any prospective interaction should begin by establishing who operates this page and where it ultimately forwards visitors. The site should not be used for sign-in, credential entry, wallet connection, or payments until the blacklist listing is independently reviewed and cleared. Where the hostname was received through a message, advertisement, or social post, the sender should be contacted through a known, independent channel to confirm that the link is genuine. Any claimed organization should be checked through its officially published website and the relevant registry of its jurisdiction, not through this page. The hostname's listing status should be rechecked after a reasonable interval, because very new sites can change content or destination quickly. Evidence:

• Homepage: the redirect stub gives no destination or contact channel to validate.
• Reputation: the listing and the split engine verdicts should be rechecked for delisting or escalation.
• Domain provenance: the very short registration history gives no track record to rely on.

Summary Verdict

The site is rated as a critical-trust, high-severity case. A confirmed external blacklist listing and a very recently created, content-free page with no identifiable operator together outweigh its clean technical behavior during testing. The available evidence supports only passive, read-only observation, and it does not support treating the site as legitimate.

Infrastructure Integrity

The site is hosted on Amazon's cloud infrastructure behind a protective delivery layer. All observed addresses are edge nodes, and the true origin server was not visible. The certificate comes from a known issuer, and the stable responses and clean DNS profile are mitigating factors. However, edge-only visibility prevents independent confirmation of the hosting arrangement and could allow content to be swapped quickly without any change in the front-end infrastructure. These factors reduce technical exposure but do not offset the reputational findings.

Closing Assessment

Interaction should be limited to passive viewing. Logins, credentials, wallet connections, downloads, and any financial transactions should be avoided unless the operator is independently identified and the blacklist listing is cleared.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.