Is crypto-9ah.netlify.app a scam? TrustSniffer's high-risk assessment: 1/100

Overview

The site is a Netlify-hosted subdomain with a crypto-themed name. To a visitor it presents only a generic "Site not found" 404 placeholder, with no products, claims, or commercial content. It has no visible business model, and its apparent purpose cannot be established from the page. The name suggests a crypto-related project that is not live at this address.

Scam/Impersonation Risk

Contradictory signals are present. An external threat-intelligence check lists the domain, with one engine rating it malicious and another suspicious. This is a blacklist hit and is the decisive adverse finding. The page also looks like a lookalike of the hosting platform's own brand, which raises a brand-impersonation concern. The 404 page shows no commercial or deceptive content. However, automated sessions found concealed forms, including password-type fields, on the placeholder in every run. A genuine error page has no reason to carry them. Combined with heavy page restructuring after interaction and a large share of external network requests, this suggests the placeholder may be a shell that can be swapped for a credential-harvesting page. Two abuse reports exist against one of the shared edge addresses. Those apply to shared provider infrastructure and are discounted, so they are not attributed to this site. No conflicting legal identities were observed, and nothing here establishes the operator's intent. Evidence:

• Homepage: a Netlify default 404 placeholder with no forms, products, or claims in the visible content.
• Automated sessions: hidden forms detected in all three runs, with password-type fields present, on a page that visibly offers none.
• Site name and hosting: a crypto-themed subdomain on a shared hosting platform, rated a strong lookalike of that platform's brand.
• Provenance: one archive snapshot, first and last seen 2026-10-08 (1 year tracked), and a domain age of about 12 days.

Regulatory Verification Notes

The placeholder contains no legal, terms, privacy, or about pages. It names no company and states no license or registration. This is a consequence of there being no real content, not a finding in itself. No regulated status has been confirmed, and no third-party broker record matched this site. Operator identity could not be independently connected to any real-world person or organisation. The valid certificate and mainstream hosting reflect the hosting platform's standard setup. They do not show who runs this subdomain and cannot offset the adverse reputation signal. Evidence:

• Homepage: no legal entity, license, or registration statement; no terms or privacy pages.
• Transport encryption: certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, OV validation, subject organisation Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).

What to Verify Next

Anyone expecting a legitimate service at this address should confirm the project's official website and channels through an independent route. Suitable routes are the organisation's verified public listings or a previously known contact, not links or messages that led to this subdomain. Anyone claiming to own the site should be able to show the deployment's ownership through the hosting platform and publish a real legal entity and licensing details. Until then, the address should not be treated as the official presence of any crypto service. Evidence:

• Homepage: the platform's own notice says the site is not deployed at this path, so no operator claims are available to check.
• Site name: the crypto-themed label could be used to imply an affiliation, which independent confirmation would settle.

Summary Verdict

The assessment is clearly cautionary. A confirmed external blacklist listing, concealed credential-type forms on a page that should be inert, and a lookalike of the hosting brand outweigh the generally clean platform setup. The domain is also very new, with almost no history. The evidence does not show the site is operational fraud, but it fails the standard of trust needed for sensitive interaction.

Infrastructure Integrity

The site sits behind AWS-operated CDN/WAF edge addresses in the US, with a valid OV certificate on shared Netlify hosting. The edge addresses are all provider-owned, and the origin server could not be observed. This is a mitigating factor only. Edge-only visibility prevents independent hosting verification and can mask rapid content swaps. The protections cannot offset the reputation risk.

Closing Assessment

The site should be limited to passive, read-only viewing at most. No login, credentials, wallet details, or payments should be submitted here, and nothing should be downloaded from it. Anyone who received this address through a message, advertisement, or social post should discard the link and reach the intended service only through an independently verified official channel.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.