Is crypto-e3o.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Overview

The site is an unpublished or broken deployment on a shared free-hosting platform. Its address is a subdomain with a crypto-themed label. A visitor sees only the hosting provider's default "Site not found" error screen, with no products, pricing, forms, claims or contact details. No business model is visible, and the page's apparent purpose cannot be determined from its content.

Scam/Impersonation Risk

This is a high-caution assessment. A reputation check currently flags the hostname as malicious in one detection and suspicious in another, and this is treated as a confirmed blacklisting. The blacklisting is decisive and is not offset by the clean-looking page. A brand-similarity indicator also fired because the hostname closely resembles the hosting platform's own brand name. No confirmed impersonation or phishing was established, so this is a soft supporting signal. Behavioural testing found hidden forms, including password-type fields, on all three runs, even though the visible page is a plain error screen with no forms. It also found heavy page-structure changes after interaction. This mismatch between a blank-looking page and concealed credential-capable markup is the most concerning content-level observation, because an unpublished placeholder can later be swapped for a credential-harvesting page. Two abuse reports exist against an address in the hosting provider's shared pool. They were discounted because they reflect the provider's multi-tenant footprint rather than this site. No conflicting legal identities were observed. Evidence:

• The homepage returned the hosting provider's default "Site not found" 404 screen, with no business content, claims or visible forms.
• Three of three sandbox runs detected hidden forms with password fields on the homepage, alongside a very high volume of page-structure mutations after interaction.
• External reputation checks show 1 malicious and 1 suspicious detection against the hostname.
• The domain is about 14 days old (0.04 years), with a single web-archive snapshot in 2026, so no established history exists.

Regulatory Verification Notes

The site has no legal, terms, about or privacy pages, so no operator name, licence, registration number or jurisdiction can be assessed. Real-world identity is unverified, and no regulated status or third-party broker record was found. The page's emptiness limits what can be assessed, but the reputation listing above means this gap should not be read as neutral. The site's connection to any real person or business remains unestablished. Evidence:

• The homepage carries no operator name, company details, licence or registration information.
• No broker or regulatory-database match was found for this hostname.
• Hosting is on AS16509 (AMAZON-02, Amazon.com, Inc., US).
• The TLS certificate is OV-level, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, and valid to 2027-03-19. It attests to the hosting platform, not to the site's operator.

What to Verify Next

Any future content published at this address should be treated as unvetted until the operator is identified through an independent route. If a business is claiming this address, its legal entity and any claimed licence should be checked directly with the relevant regulator's public register. The address should also be compared with the official channels of any brand it purports to represent, using independently sourced contact details. Interaction should not proceed until the reputation listing is cleared and the hidden form markup is explained. Evidence:

• The homepage names no entity whose registration could be checked.
• The hostname's crypto-themed label implies a financial purpose that the page itself does not substantiate.
• The reputation detections and the concealed password-type fields are the open items that need to be cleared.

Summary Verdict

The site carries an elevated risk posture. A confirmed external threat listing, a very young domain with no meaningful history, concealed credential-capable form markup and an unverified operator together outweigh the benign appearance of the placeholder page. The technical hygiene of the underlying platform does not neutralise these reputation and behavioural concerns.

Infrastructure Integrity

The site sits behind AWS-fronted infrastructure on AS16509. All four observed addresses belong to edge servers, and the true origin was not observable. The certificate is valid and the infrastructure is mainstream, which is a mitigating factor only. It reflects the shared hosting platform rather than the operator and does not offset the reputation risk. Edge-only visibility also means content can be swapped quickly without any change in hosting signals.

Closing Assessment

Passive viewing only is appropriate. Account creation, login, credential entry, wallet connection and any payment or financial transaction at this address should be avoided until the threat listing is cleared and an accountable operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.