Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
crypto-jrt.netlify.app is low-trust and potentially risky.
| What this site appears to be | The captured page is Netlify's 'Site not found' 404 error page, stating that the requested path does not exist on Netlify. It contains no site content, forms, links, or trust signals, so no assessment of the underlying site is possible. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 2 reports; shared hosting inflates reports | Clear |
| Domain age | 11 days oldMost scam domains are under a year old | Risk |
| Web archive | 2 snapshots2 snapshots | Clear |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
The website at crypto-jrt.netlify.app is a free-tier subdomain on the Netlify hosting platform. When visited, it shows only Netlify's generic "Site not found" 404 error page, which says the requested path does not exist. The page has no products, pricing, branding, contact details, legal pages or navigation, so it shows no business model or stated purpose. The only hint of intent is the crypto-themed hostname.
Scam/Impersonation Risk
The assessment is clearly cautionary. Threat-intelligence sources currently flag this hostname: one reports it as malicious and one as suspicious. This is a confirmed blacklist signal and the decisive contradiction. The hostname closely resembles the hosting platform's own domain, which raises a brand-lookalike concern. The automated analysis found no phishing page, wallet-drainer behaviour or clipboard hijacking. No conflicting legal identities appear, because the site publishes no identity information at all. The most significant behavioural anomaly is that the visible page is an inert error screen, yet repeated sandbox sessions detected concealed forms, including password-type fields. The page also showed very heavy dynamic page changes after interaction. These forms and changes are not explained by the visible content, which fits a placeholder or staging shell that could be swapped for a credential-collection front end. Abuse reports exist against one of the shared cloud addresses serving the site. They relate to the shared provider infrastructure rather than this site specifically, so they are discounted and do not drive the conclusion.
- Homepage: shows only a hosting-provider 404 "Site not found" message and no usable content.
- Homepage sandbox runs: concealed forms with password fields appeared in all three runs, with about 4,130 page-structure mutations after interaction.
- External reputation: 1 malicious and 1 suspicious detection across the reputation sources queried, resulting in a blacklist hit.
- Domain provenance: registered in 2026 and about 10 days old, with 2 archive snapshots in 2026 (1 year tracked).
Regulatory Verification Notes
The site presents no legal, terms, privacy, about or licensing pages. It claims no regulatory status, licence or registration, and no third-party broker-reputation match exists. The operator's real-world identity is therefore unverified, and ownership and governance are opaque. The site gives nothing to confirm it is connected to any named person or company. The valid transport certificate and the use of a well-known cloud provider show only that the technical hosting is in order. They do not identify who controls the content. The certificate's subject organisation is the hosting platform, not the site's operator.
- Entire site: no company name, licence number, registration details or legal pages are published.
- Hosting infrastructure: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Transport encryption: OV-validated TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19.
What to Verify Next
Anyone who received this address should first establish how they came to it. If it arrived through an unsolicited message, advertisement, social post or chat, it should be treated as unsolicited. The sender or promoter should be identified and asked, through a separate channel, what service the address is meant to provide. If the address claims to belong to a crypto platform, exchange or financial service, the claim should be checked against that organisation's official website, which should be reached by typing its address directly. A licence should be confirmed in the relevant regulator's own public register. The site's contact channels should be confirmed through an independent route before any further engagement. The address should be re-assessed only after it shows real content, identity and legal disclosures.
- Homepage: returns a not-found response with no outbound links and no contact or social presence to cross-check.
- Entire site: no stated service, token, platform or regulated activity exists to validate against a registry.
- Domain history: roughly ten days of registration, so no track record of earlier use is available.
Summary Verdict
The site is assessed as low trust with an elevated risk posture. It has external reputation detections, an unverified operator and a very recent registration. Its concealed, unexplained form behaviour contrasts with a blank public face. The hosting-level technical hygiene is sound, but it is insufficient to offset these indicators.
Infrastructure Integrity
The site is served through cloud edge infrastructure operated by Amazon, on the Netlify platform. All four observed addresses are CDN edge nodes, and the origin server was not observable. This is mitigating context only. It does not demonstrate legitimacy, and edge-only visibility prevents independent confirmation of who hosts the underlying content. It also means content could be changed quickly without leaving infrastructure traces.
Closing Assessment
Interaction should be limited to passive viewing at most. No account login, credential or password entry, wallet connection or payment should be attempted on this address. The site should be reconsidered only if it later shows clear operator identity and independently confirmed legitimacy.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, page content, history in the web archive.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW
05 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
Signals weighed against the site
- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of crypto-jrt.netlify.app.
- The request stayed on crypto-jrt.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | 0.03 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 2 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about crypto-jrt.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.