Is crypto-1z5.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website is a subdomain on a public application-hosting platform whose label suggests a cryptocurrency theme. When visited, it serves only the platform's default "Site not found" error page. That page says the requested address does not exist and invites visitors to build their own site. It offers no products, services, forms, links, company description or contact details, so the site's purpose and business model cannot be determined from what it presents.

Scam/Impersonation Risk

The posture is clearly cautionary, because a confirmed external blacklist hit attaches to this address. One external threat-intelligence engine rated it malicious and another rated it suspicious, which is the decisive negative signal. No phishing page, brand-impersonation page or conflicting legal identities were confirmed. The lookalike flag against the hosting platform's name reflects the platform's own error page served under a subdomain of that platform, not a demonstrated imitation. The behavioral analysis is more concerning. The visible page contains no forms, yet all three sandbox sessions detected concealed form elements, including password-type fields. Interaction also triggered an exceptionally large burst of page-structure changes. Content that is invisible in a static capture but loads or changes dynamically is a recognized pattern for a placeholder that can be swapped for a credential-harvesting page. No suspicious scripts, wallet-drainer behavior, clipboard hijacking or cloaking were observed, and outbound requests went only to recognized destinations. The listing combined with the hidden-form behavior therefore justifies caution, but it does not prove malicious intent. Evidence:

• Homepage: the only content is a platform-generated "Site not found" message; no offer, product claim or contact channel exists to assess.
• Reputation checks: one engine returned a malicious verdict and one a suspicious verdict, producing an external blacklist flag.
• Sandbox sessions on the homepage: hidden forms were detected in 3 of 3 runs, with password-type fields, while no visible form exists.
• Sandbox sessions: about 4,130 DOM mutations after interaction, with no wallet-connect, drainer or clipboard activity.

Regulatory Verification Notes

The site has no legal, terms, privacy or about pages, so no operator name, registered entity, licence or registration number can be read from it. Its real-world operator is therefore unverified, and nothing links the address to any person or brand. This is a transparency limitation, not evidence of misconduct on its own, because a default error page would not be expected to carry disclosures. No financial service or regulated activity is claimed, so no licensing question arises, and no third-party broker record exists for it. The valid, organization-validated certificate belongs to the hosting platform. It confirms encrypted transport but says nothing about who controls this particular subdomain. Evidence:

• Homepage: no company name, licence, jurisdiction or registration details appear anywhere.
• Hosting: served from AS16509 (Amazon, AMAZON-02), US.
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, OV validation, subject organization Netlify, Inc, valid to 2027-03-19.

What to Verify Next

The first step is to establish who deployed content to this subdomain. Any party that supplied the address should confirm it through an independent, previously trusted channel. The platform's abuse or trust-and-safety team can be asked whether the deployment is active and what it serves. The address should be re-examined only after a real site is published, at which point the full legal, licensing and contact pages can be assessed. Any claim of affiliation with an exchange, wallet or investment service should be checked against that organization's own official channels, reached by a route not provided by this site. Evidence:

• Homepage: no stated owner or affiliation, so any association must be confirmed externally.
• Reputation findings: the blacklist flag should be re-checked after any content change, since the current placeholder may be replaced.
• Contact route: none is published, so official support channels must be sourced independently.

Summary Verdict

Available evidence supports an elevated-risk, cautionary posture. The address carries a confirmed adverse reputation signal and concealed-form behavior, and it has no content or identity that could offset them. This is a risk determination about the address's current state, not a finding that its operator is a confirmed fraudster.

Infrastructure Integrity

The site is hosted on Amazon-operated infrastructure behind a recognized edge layer, and the real origin server was not observable. This is a mitigating factor for availability and baseline hygiene only. It does not offset the reputation and behavioral concerns, and edge-only visibility makes it harder to see what actually backs the address or how quickly its content could change. Two abuse reports exist against a neighboring shared provider address, with no reporter confidence attached. Because the address is shared provider infrastructure, those reports are discounted and are not attributed to this site.

Closing Assessment

Read-only viewing of the placeholder is the extent of reasonable interaction. Logging in, entering credentials or passwords, connecting a wallet, and making any financial or cryptocurrency transfer through this address should be avoided until the operator is independently identified and the adverse reputation findings are cleared.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.