Is crypto-hbe.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Overview

This website is a bare redirect-placeholder page hosted on a free subdomain of a public site-hosting platform. A visitor sees only the single line "redirecting.." and no navigation, title, description, forms, links, products or services. Its business purpose and monetisation model therefore cannot be determined from what it presents, and the subdomain name suggests a crypto-themed project that the page itself never describes.

Scam/Impersonation Risk

Contradictory signals are present. An external threat-intelligence check currently flags the site: one scanning engine rates it malicious and a second rates it suspicious. This is a confirmed blacklist-type hit and is the decisive element of the assessment. Separately, page analysis found a strong typo-style resemblance between the subdomain label and the name of its own hosting platform. That suggests possible brand mimicry, but it is not confirmed impersonation, because the site is simply a subdomain of that platform. A placeholder that shows only "redirecting.." and has no visible content fits staging or pass-through behaviour, which is commonly used to forward visitors to other destinations. In this capture, though, the sandbox found no forms, credential fields, hidden forms, wallet prompts, clipboard writes or external network calls, and no cloaking. No conflicting legal identities appear, because the site presents no identity at all. The four abuse reports on record are tied to a shared cloud-provider address that serves many tenants, so they are a weak, indirect signal about this site. The site's real behaviour could change quickly, because content on this kind of hosting can be swapped without any change to the address. Evidence:

• Homepage: the only content is the 13-character text "redirecting.."; no title, meta description, forms or outbound links were captured.
• External reputation: one engine flags the domain as malicious and one as suspicious, producing a blacklist-level warning.
• Brand check: the subdomain label shows strong lookalike similarity to its hosting platform's name, but impersonation is not confirmed.
• Sandbox behaviour: 3 of 3 runs returned HTTP 200 with zero external requests, no console errors and no wallet or credential activity.

Regulatory Verification Notes

The site has no legal, terms, privacy, about or contact pages. It names no operating company and claims no licence, registration or regulator. For a crypto-themed address this is a content gap, and the real-world operator cannot be independently connected to the site. The absence of a licence claim is not itself evidence of wrongdoing, and no third-party broker or regulatory-database match exists for this domain. The valid organisation-validated certificate belongs to the hosting platform, not to the site's operator. It therefore confirms encrypted transport but says nothing about who runs the site. Evidence:

• Homepage: no company name, jurisdiction, licence number or regulator is stated, and no legal pages exist.
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Broker reputation database: no match for this domain.

What to Verify Next

Before any engagement, the site's destination and intended purpose should be established independently. This means finding which real project or organisation, if any, claims the subdomain, and doing so through channels not linked from this page. Any redirect target should be inspected only in an isolated environment. The external blacklist flag should be rechecked later, since a clean result after remediation would change the picture. Any claimed operator should also be asked for a registered legal entity and, if financial services are offered, checked against the relevant regulatory register through an offline route. Evidence:

• Homepage: it has no links, contact details or entity name from which to start verification.
• Identity status: the operator cannot currently be tied to any real-world brand or person.
• External reputation: the current warning applies to the domain at the time of analysis and may change.

Summary Verdict

The site is assessed as low-trust with an elevated risk posture. Its blank placeholder content, unverifiable operator and active third-party threat flag converge into a cautionary conclusion that its behaviour cannot be relied upon. Its technical hygiene is sound, but that does not offset the reputation warning or the complete absence of substantive, attributable content.

Infrastructure Integrity

The site resolves to four addresses, all belonging to Amazon's cloud network, which sits behind a protective CDN/WAF layer. The origin server was not observable. A properly configured certificate and a stable, clean sandbox run are mitigating factors. Edge-only visibility prevents independent confirmation of the hosting origin and can mask rapid content swaps, so this protection reduces exposure but cannot offset the reputational risk.

Closing Assessment

The site should be treated as read-only at most. Accounts should not be created or logged into, credentials and personal data should not be submitted, and no wallet connection, payment or financial transfer should be made through it. Nothing should be downloaded from it, and any redirect it triggers should be treated as untrusted until the site is independently vetted.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.