Is crypto-knr.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Overview

This is a minimal, newly observed web property hosted as a subdomain on a shared free-tier deployment platform. Its hostname suggests a cryptocurrency theme. When captured, the homepage rendered only a short "redirecting.." placeholder. It showed no title, branding, navigation, links, forms, contact details or legal pages. The site's purpose and business model cannot be determined from what it presents. The pattern is consistent with a redirect stub or interstitial, the kind often used as a staging hop in a longer traffic chain.

Scam/Impersonation Risk

The most serious finding is that an external reputation source currently carries a blacklist listing against the domain. One engine rates it malicious and another rates it suspicious. The page content is empty, so these detections cannot be tied to any visible lure, and that leaves the listing as the decisive concern. The hostname also closely resembles the name of the hosting platform it sits on, which the page analysis registered as a suspected lookalike. This is not a confirmed brand impersonation, but it fits a pattern of borrowed credibility. No conflicting legal identities were found, and no phishing form, credential capture or wallet interaction was observed. Three behavioural runs showed no external requests, no hidden forms, no cloaking and no clipboard or wallet activity. That confirms only that the placeholder page is passive. It does not show that the redirect target, which was never captured, is safe. A crypto-themed name, a redirect placeholder, a blacklist hit and a very young domain together are a recognised high-risk archetype for traffic-forwarding and lure infrastructure. Evidence:

• Homepage: the only visible content was the 13-character placeholder "redirecting.."; no title, meta description, links or forms were present.
• External reputation: the domain is flagged by an external blacklist source (1 malicious and 1 suspicious detection).
• Domain provenance: the domain is about 18 days old (0.05 years), with 7 archive snapshots in 2026 and 1 year tracked.
• Behavioural sandbox: 3 of 3 runs completed with HTTP 200, 0 external requests and 0 wallet or clipboard events.

Regulatory Verification Notes

The site presents no legal, terms, privacy or about pages and no company name, address, licence or registration number. Because the page is an empty placeholder, nothing on it claims financial or regulated activity, so there is no claim to test. Operator identity cannot be tied to any real-world person or organisation, so any apparent legitimacy rests on infrastructure-level signals only. Ownership and governance are opaque. This is an administrative limitation and not an identity contradiction. No third-party broker or regulator listing matched the domain, and the absence of one is neutral. The valid certificate belongs to the hosting platform and does not vouch for whoever published the content. Evidence:

• Homepage: no corporate entity, licence authority or registration number is disclosed, and no legal pages exist.
• Transport security: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).

What to Verify Next

Anyone who received this address through an unsolicited message, advertisement or social post should treat the sender as the item under scrutiny and check the originating channel independently. The redirect destination should be examined only in an isolated, disposable environment, since its final landing page was never captured. If a legitimate crypto service is claimed, its official domain should be obtained from an independently sourced listing and compared with this hostname. Any licensing or registration claim should be confirmed directly with the relevant registry. Official contact channels should be confirmed through an offline or independent route. Evidence:

• Homepage: the redirect target was not captured, so the final destination is unknown.
• Platform subdomain: the hostname is a free-tier subdomain, not an independently registered brand domain.
• Domain age: the domain is a few weeks old, so no long operating record exists to corroborate any claim.

Summary Verdict

The available evidence supports an elevated-risk posture. An active external blacklist listing, a negligible operating history, an empty and unidentifiable page, and an unverified operator together outweigh the technically clean hosting and certificate hygiene. The site cannot be treated as legitimate or as established.

Infrastructure Integrity

The site runs on Amazon-operated cloud infrastructure behind a CDN/WAF layer, and every observed address is an edge node. The origin server was not observable, so hosting cannot be independently verified and content could be swapped quickly behind the edge. Protective infrastructure is a mitigating factor only and does not offset the reputation risk. Two abuse reports were recorded against one shared provider address. They apply to infrastructure used by many tenants, have been discounted, and are not attributed to this site.

Closing Assessment

Read-only observation of the placeholder page is the outer limit of reasonable interaction. Login, credential entry, wallet connection and any financial or payment action should be avoided. The site should not be shared or promoted, and any link that led to it should be reported to the platform or channel that delivered it.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.