--- title: "Is crypto-ens.netlify.app Safe? Risk Report, Score 25/100" source: TrustSniffer type: Website trust & fraud report subject: "crypto-ens.netlify.app" verdict: "Low Trust" title: "Is crypto-ens.netlify.app Safe? Warning Signs, Score 25/100" trust_score: 25 classification_confidence: 64 canonical_url: https://trustsniffer.com/report/crypto-ens.netlify.app assessed: 2026-10-20 --- # Is crypto-ens.netlify.app safe? TrustSniffer's low-trust assessment: 25/100 ## Verdict **Verdict: Low Trust, trust score 25/100.** crypto-ens.netlify.app is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-20 by automated analysis. Classification confidence 64%. | Field | Value | | --- | --- | | What this site appears to be | The page contains only the placeholder text 'redirecting..' with no visible content, links, forms, or service description to analyse. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 1 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 1% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear | | Domain age | 18 days old (Most scam domains are under a year old) | Risk | | Web archive | 72 snapshots (72 snapshots) | Clear | | Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted | ## The page as captured ![Screenshot of the crypto-ens.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/crypto-ens.netlify.app/screenshots/first.png) _What crypto-ens.netlify.app served when TrustSniffer captured it on 2026-10-20. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. - The operator behind the site could not be independently connected to a real-world brand or person. ## Full analysis ### Overview This website is a bare placeholder page on a free subdomain of a public static-hosting platform. The only visible content is the text "redirecting..", with no title, description, links, forms, products, pricing or service explanation. The subdomain name evokes a crypto name-service theme, but the page shows no actual product or business model. Its apparent purpose is to forward visitors elsewhere, so it works as an intermediary or staging page rather than a destination in its own right. ### Scam/Impersonation Risk **Contradictory signals are present.** An external reputation source has flagged the site: one engine rated it malicious and another suspicious. That is enough to constitute a **blacklist** hit. The check found no phishing verdict from the major browser safe-browsing service, no conflicting legal identities, and no confirmed brand impersonation. The page analysis did note a strong typographic resemblance between the hostname and the hosting platform's own domain. That is expected for a subdomain on that platform and is not an impersonation finding. A separate negative signal is a small number of abuse reports against an address used by the site's hosting provider. Those reports attach to shared provider infrastructure, so they cannot be attributed to this site specifically, but they are not discounted either. The page's redirect-only behavior is the most operationally significant feature. A placeholder that forwards visitors can be repointed to any destination without any visible change, and the sensor could not observe where it leads. That matters because the name suggests a crypto-themed audience, which is exactly the audience targeted by wallet-connection and credential-harvesting redirects. The sandbox saw no external network calls, no hidden forms, no cloaking and no wallet-drainer behavior in its three runs, but an empty page offers little to observe. Evidence: - Homepage: contains only the 13-character text "redirecting.." with no title, metadata, links or forms, and the capture returned a normal success status. - Domain provenance: registered in 2026 (~0.05 years, about 18 days old); the web archive holds 72 snapshots, all from 2026 (1 year tracked), with a high degree of content change. - Reputation: the external blacklist flag rests on 1 malicious and 1 suspicious detection; the safe-browsing check was clean. The 4 abuse reports apply to a shared provider IP address, and the abuse-confidence rating is minimal. ### Regulatory Verification Notes The site has no legal, terms, privacy, about or contact pages. It names no operating company, makes no licensing or registration claim, and offers no complaint or support channel. Because there is no content, the site's real-world operator cannot be linked to any person or business, and operator identity remains unverified. Ownership and governance opacity are both present. A very recent registration with incomplete owner details compounds this. Neither point is a licensing finding on its own, but together with the reputation flag they leave no independent footing for trusting the site. No third-party broker or regulatory database lists the domain. That absence is neutral context, not a clearance. The valid certificate is an organization-validated one issued to the hosting platform, not to the site's operator. It confirms encrypted transport only and says nothing about who runs the page. Evidence: - Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), registry ARIN, with a resolved DNS record. - TLS: certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, OV validation, subject organization Netlify, Inc, valid to 2027-03-19. - Whole site: no company name, license number, registration number or jurisdiction appears in the captured content, and no regulator or broker listing was matched. ### What to Verify Next Any engagement should be preceded by independent confirmation of who operates this page and where it sends visitors. The link or message that led to this address should be traced back to its source. If it claims to represent a crypto name-service, wallet or exchange brand, the official address should be obtained directly from that brand's verified channels, then compared character by character with this hostname. Any claimed association should be confirmed through the brand's own official support route, not through this site. If the redirect resolves to a different destination, that destination should be assessed on its own merits before any interaction. The reputation flag should be re-checked after a few weeks, because new domains are often reclassified quickly in either direction. Evidence: - Homepage: the redirect target is not exposed in the captured content, so the final destination is unknown. - Hostname: the crypto-themed label on a free platform subdomain gives no verifiable tie to any named brand. - Domain provenance: a registration only days old leaves no established history to rely on in the meantime. ### Summary Verdict The available evidence supports a clearly cautionary, high-risk posture. A confirmed reputation flag, an empty redirect-only page, a very new domain and unverified operator identity converge toward elevated risk. Valid encryption and clean sandbox behavior are mitigating but do not offset those findings. ### Infrastructure Integrity The site sits behind an AWS-based CDN/WAF layer on the hosting platform's shared edge network. All observed addresses are edge nodes and no origin server was observable. This protection is a mitigating factor only. It has no bearing on legitimacy, and the edge-only view prevents independent hosting verification and could mask a rapid change in content. ### Closing Assessment The site should be treated as read-only at most. No login, credential entry, wallet connection, payment or other financial interaction should occur on it or on any page it forwards to. Any downloads or prompts that follow the redirect should be declined. _Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 3 findings contributed to this verdict, raised by external reputation, page content, hosting and network. ### 01 External reputation - A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`) ### 02 Page content - The page loaded on its own domain but had no readable content. (Page content `rule:PAGE_CONTENT_EMPTY`) - The page appears to present itself as a known brand it is not verified to belong to. (Page content `rule:PAGE_BRAND_SUSPECTED`) - The page content shows at least one warning sign that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_SOME`) - The page has no title, which almost every website sets. (Page content `rule:PAGE_TITLE_MISSING`) ### 03 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### Signals weighed against the site - AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of crypto-ens.netlify.app. - The request stayed on crypto-ens.netlify.app. It was not redirected to another domain. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 2a05:d014:58f:6200::258 | | Name servers | Not available | | CDN / edge network | Detected (aws) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | | SSL expiry | 2027-03-19 | | Domain age | 0.05 years (continuous registration) | | Domain expiry | Not available | | Archive first seen | Not available | | Archive snapshots | 72 | | Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 1% confidence, 4 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about crypto-ens.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [crypto-je9.netlify.app](https://trustsniffer.com/report/crypto-je9.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-5ay.netlify.app](https://trustsniffer.com/report/portal-moonshot-5ay.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-avq.netlify.app](https://trustsniffer.com/report/portal-moonshot-avq.netlify.app), a similar name (Low Trust, 25/100) - [crypto-xft.netlify.app](https://trustsniffer.com/report/crypto-xft.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-t1t.netlify.app](https://trustsniffer.com/report/portal-moonshot-t1t.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-phx.netlify.app](https://trustsniffer.com/report/portal-moonshot-phx.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-x0g.netlify.app](https://trustsniffer.com/report/portal-moonshot-x0g.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-dfb.netlify.app](https://trustsniffer.com/report/portal-moonshot-dfb.netlify.app), a similar name (Low Trust, 25/100) - [kilcodocostumes.com](https://trustsniffer.com/report/kilcodocostumes.com), another site assessed as low-trust (Low Trust, 40/100) - [boscos.com](https://trustsniffer.com/report/boscos.com), another site assessed as low-trust (Low Trust, 40/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site) - [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26) - [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen) --- *Source: [TrustSniffer](https://trustsniffer.com/report/crypto-ens.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/crypto-ens.netlify.app · assessed 2026-10-20.*