Is crypto-7lc.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This address is a subdomain on a commercial site-hosting platform. It currently serves only the platform's generic "Site not found" error screen, which says the requested page does not exist and invites visitors to build their own site. It offers no products, services, pricing, login or transaction content, so its apparent purpose and business model cannot be determined from what it presents.

Scam/Impersonation Risk

The site shows confirmed contradictory signals. An external threat-intelligence listing flags the address, and this is the decisive factor behind the cautionary posture. The hostname uses a crypto-themed label on a shared hosting namespace, but the homepage has no cryptocurrency content. That mismatch between the name and the visible page is typical of placeholder or staging addresses, which can later be swapped for different content. The page-level analysis also flagged possible brand imitation of the hosting platform itself. The page is a stock platform error screen, so this may only reflect that. In automated behavioural runs, hidden forms appeared on every pass, and a password-type form was detected. Neither is visible on the rendered page. The page also showed very heavy DOM changes after interaction, which is out of keeping with a static error screen and consistent with scripted content being injected. Two abuse reports exist against one of the edge addresses serving the site. They are discounted because that address is shared provider infrastructure rather than specific to this site, and they carry no weight against it. No conflicting legal identities were observed. No identity contradiction is therefore asserted, but the confirmed listing and the hidden-form behaviour warrant a high-risk assessment. Evidence:

• Homepage: renders only a 404 "Site not found" notice with no visible forms, yet automated runs detected hidden forms in all three passes.
• Homepage: sandbox runs recorded a very high volume of DOM mutations after interaction (4,130 maximum change), unusual for a static error page.
• Domain registration: first seen 2026-10-07, about 12 days old (0.03 years), well inside a new-domain window.
• Web archive: 1 snapshot, in 2026, 1 year tracked, so there is effectively no history.

Regulatory Verification Notes

The site publishes no legal, about, terms, privacy or contact pages, and no company name, licence or registration number. The only page is a platform error screen, so there is nothing to assess for regulated activity. Ownership and governance are opaque, and the real-world operator is not independently connected to any person or organisation. The valid, organisation-validated certificate belongs to the hosting platform, not to the operator. It shows that the connection is encrypted, not who runs the content. No third-party broker or regulator-style record matched this address, and that absence is neither a clearance nor a negative finding. Any claim of licensing or authorisation made later at this address would need independent confirmation. Evidence:

• Homepage: only the platform's 404 notice is present, with no entity, licence or registration disclosures.
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Broker reputation lookup: no match found.

What to Verify Next

Before any engagement, the operator should be asked to show what this address is meant to host. The request should go through a channel that was independently sourced, not through anything this page offers. The legitimate entity, if one claims this address, should confirm it through its official website or published support channels. The status of the external threat listing should be rechecked once real content has been deployed, because the current page cannot support or refute the flagged behaviour. If a licence or regulatory status is later claimed, it should be confirmed directly with the relevant registry. Evidence:

• Homepage: no operator content exists, so no claim can currently be tested against a registry.
• Hidden forms: the behavioural findings should be re-run against any replacement content.
• Domain: the very recent registration means that any later track record must be built from scratch.

Summary Verdict

The overall posture is high-risk. A confirmed external listing, a very new domain, no verifiable operator and unexplained hidden-form behaviour on an otherwise empty page together outweigh the neutral appearance of the visible content. The site cannot be treated as a trustworthy counterparty in its current state.

Infrastructure Integrity

The site sits behind edge nodes of a major cloud provider, and all four observed addresses are edge nodes, so the origin server is not observable. That protective setup is a mitigating factor only and cannot offset the reputational concerns above. The certificate is valid and the infrastructure is mainstream. Edge-only visibility also means the content behind this address can be swapped without any change to the hosting footprint.

Closing Assessment

At most, the address should be treated as read-only. Credentials should not be entered, no wallet or account should be connected, and no payment or financial transaction should be made at this address until the operator is independently identified and the external listing is resolved.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.