Is crypto-eon.netlify.app a scam? TrustSniffer's high-risk assessment: 15/100

Overview

This website is a minimal page on a free, shared-platform subdomain whose name suggests a cryptocurrency theme. When loaded, it shows only a brief "redirecting.." placeholder. It has no title, description, navigation, forms, or visible product, so no service, claim, or business model can be observed, and the destination it forwards visitors to is unknown. Its apparent purpose is to act as an interstitial that sends visitors elsewhere.

Scam/Impersonation Risk

Contradictory signals are present. External reputation sources currently flag the domain, with at least one engine rating it malicious and another rating it suspicious. This is a confirmed blacklist-type listing and the decisive negative in the assessment. The domain was also created only days before analysis, which fits throwaway or short-lived infrastructure. Its web-archive history is a single capture. A lookalike comparison to the hosting platform's own brand was also raised, but nothing confirms impersonation of that platform or of any other brand. Reports of abusive activity exist against a shared address of the hosting provider. These are attributed to shared infrastructure and say little about this site's operator on their own. The page itself shows no forms, no login prompt, no wallet interaction, and no external network calls, and sandbox runs were stable with no cloaking. The danger is therefore not what the page does now. The page is an unexplained redirect that can be repointed to any destination at any time, and the domain is already listed by threat sources. The crypto-themed hostname raises the stakes for any visitor who might later be asked to connect a wallet or send funds. Evidence:

• Homepage: contains only the 13-character placeholder "redirecting..", with no title, meta description, links, or forms, and an automatic redirect behaviour flag.
• Domain provenance: registered about 16 days before analysis (~0.04 years), with 1 archive snapshot (first and last seen 2026-10-03, 1 year tracked).
• External reputation: one malicious and one suspicious detection across major reputation engines, plus 4 abuse reports against a shared hosting-provider address.
• Sandbox behaviour: 3 of 3 runs succeeded with HTTP 200, zero external requests, and no cloaking or clipboard/wallet activity.

Regulatory Verification Notes

The homepage is the only page captured, and it names no operator, legal entity, jurisdiction, licence, or registration number. It makes no regulatory claim, so there is nothing to confirm or refute. No third-party broker or regulator record matched this domain. The absence of any disclosure is a transparency gap rather than evidence of wrongdoing, but it matters because the hostname implies a crypto-related offering that would normally require identifiable operators. The valid certificate is issued to the hosting platform, not to whoever operates this site, so it gives no information about the site's real-world operator. The operator is unverified, and the technical hygiene seen here must not be mistaken for legitimacy. Evidence:

• Homepage: no company name, licence, registration number, terms page, or privacy page was found.
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV validation) to the subject organization "Netlify, Inc", valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Third-party broker data: no match found.

What to Verify Next

Anyone who received this link should first establish who sent it and why, using an independent route such as a known phone number or an officially published channel, not anything reached through the link. The final redirect destination should only be examined in an isolated, disposable environment, and any site it leads to should be assessed on its own. If a crypto platform or financial service is claimed, the operating legal entity and its licence should be confirmed directly with the relevant regulator's public register, and the official domain should be confirmed from a trusted source. No wallet connection, seed phrase, credential, or payment should be provided to this domain or to anything it forwards to until this is done. Evidence:

• Homepage: the redirect target is not exposed on the page, so any onward destination is currently unknown.
• Identity: no operator or licensing claim exists on the site to check against a registry.
• Reputation: the current external listing means any onward destination should be treated as suspect until independently cleared.

Summary Verdict

The overall posture is elevated risk. Active external threat listings, a very young domain with almost no history, and a content-free redirect page with no verifiable operator outweigh the technically clean sandbox behaviour and valid encryption. Real-world identity is unverified, and no part of the evidence supports treating this domain as an established or legitimate service.

Infrastructure Integrity

The site sits on a major cloud provider's content-delivery and web-protection layer, and all observed addresses are edge servers, so the origin server is not visible. This is a mitigating factor only, since it shows the platform is mainstream and the connection is encrypted. It does not offset the external threat listings. It also means the content behind the edge can be swapped quickly without any visible change in hosting.

Closing Assessment

The site should not be used for logging in, entering credentials, connecting a wallet, or making any payment. Any interaction should be limited to passive viewing, if at all, and only from an isolated environment. Links to it should not be forwarded, and anyone asked to act on it should seek confirmation through a separate, trusted channel.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.