Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
crypto-inq.netlify.app shows high-risk / scam indicators.
| What this site appears to be | Netlify 'Site not found' 404 page indicating that the requested site or path does not exist on Netlify. No service, offer, form, or financial activity is present. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 1% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | 18 days oldMost scam domains are under a year old | Risk |
| Web archive | 99 snapshots99 snapshots | Clear |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is a Netlify-hosted subdomain with a crypto-themed name. At analysis time, its homepage served only the hosting platform's generic "Site not found" error page. Visitors see no products, offers, or company branding, only a notice that the address does not exist on the platform and a prompt to "Start building" a site there. No business model is observable. The page appears to be an unpublished, removed, or placeholder deployment, not an operating service.
Scam/Impersonation Risk
Contradictory signals are present. External reputation sources currently flag the site, and this amounts to a confirmed blacklist listing, even though the checked page is an empty error screen. A separate warning concerns the shared cloud-network address range serving the site. Those abuse reports apply to shared provider infrastructure, not to this site specifically, so they carry little weight on their own. No phishing, conflicting legal identities, or confirmed brand impersonation were established. The page analysis noted that the hostname resembles the hosting platform's own name, but that is structural, since the site is a subdomain on that platform. The more consequential finding is behavioral. The visible 404 page contains no forms, yet automated sessions detected hidden forms in every run, including password-type fields. The page also produced a very large number of structure changes after interaction, and almost all of its network activity went to external destinations. A static error page should not behave this way. This pattern is consistent with a placeholder that could be swapped for credential-collection content, and the crypto-oriented hostname raises that concern. These signals are not proof of intent. The cautionary posture rests on the blacklist listing together with this behavior.
- Homepage: renders only a platform "Site not found" notice, with no visible forms, login prompts, or financial activity.
- Behavioral sessions: hidden forms and password-type fields were detected in all three runs, which contradicts the form-free visible page.
- Behavioral sessions: roughly 4,130 page-structure mutations after interaction, with about 99.6% of network activity directed to external hosts.
- Domain history: the site's tracked footprint is about 18 days old (~0.05 years), with 99 archive snapshots, all within 2026 (1 year tracked).
Regulatory Verification Notes
The homepage carries no legal entity name, terms, privacy policy, or contact details. It has no licensing or registration statement of any kind. The error page is not a corporate disclosure page, so this is a verification gap and not evidence of a scam. The site has no identifiable operator, and its real-world identity remains unverified. No third-party broker or regulatory-database match was found for the site, so there is no external regulatory signal in either direction. The site's transport security is valid and comes from a recognized issuer. This confirms an encrypted connection but does not establish who runs the site.
- Homepage: no company name, licence number, registry reference, or regulator is stated.
- Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), with the subject organization shown as Netlify, Inc and validity to 2027-03-19. The certificate belongs to the hosting platform and not to an independent operator.
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
What to Verify Next
The first step is to establish whether the address is a live service and who controls it, through an independent route such as the project's official channels, which should be confirmed by means other than this site. A legitimate crypto project would be expected to publish its address through verifiable sources, so any claim that this subdomain belongs to one should be matched against those sources. The hidden forms and password-type fields should be re-checked later, because content deployed to the address could change what it does. Until the owner is confirmed, any links, wallet prompts, or downloads reaching this address from messages, social posts, or advertisements should be treated as unconfirmed. The site's current listing status should also be rechecked against the original reputation sources, and the official contact channels should be confirmed independently.
- Homepage: no stated operator, project, or product to cross-check against.
- Behavioral sessions: hidden credential-type form elements are present while the visible page offers no login.
- External reputation sources: at least one source returns a malicious verdict and another a suspicious one for this address.
Summary Verdict
The overall posture is high risk. A confirmed external blacklist listing, hidden credential-type form behavior on an otherwise empty page, and an unverified operator outweigh the valid encryption and the established cloud provider. The site shows no legitimate function and no identifiable owner, and it should be treated as a potentially hazardous address, not a neutral placeholder.
Infrastructure Integrity
The site is delivered through a trusted, large-scale cloud CDN/WAF layer, and every observed address is an edge node. The true origin server is not observable, so hosting cannot be independently verified, and content can be swapped quickly behind the edge. Protective infrastructure is a mitigating factor only. It cannot offset the external threat detections, and the abuse reports on the shared network range reflect many tenants and say little about this site.
Closing Assessment
The site should not be used for logins, credential entry, wallet connections, or financial transactions. Any exposure should be limited to read-only viewing, and nothing should be downloaded from it. Anyone who received this address through an unsolicited message should treat it as suspect and report it to the sender's platform.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, page content.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 Page content
- The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of crypto-inq.netlify.app.
- The request stayed on crypto-inq.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::258 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | 0.05 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 99 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 1% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about crypto-inq.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.