--- title: "Is crypto-kqh.netlify.app Safe? Risk Report, Score 25/100" source: TrustSniffer type: Website trust & fraud report subject: "crypto-kqh.netlify.app" verdict: "Low Trust" title: "Is crypto-kqh.netlify.app Safe? Warning Signs, Score 25/100" trust_score: 25 classification_confidence: 64 canonical_url: https://trustsniffer.com/report/crypto-kqh.netlify.app assessed: 2026-10-21 --- # Is crypto-kqh.netlify.app safe? TrustSniffer's low-trust assessment: 25/100 ## Verdict **Verdict: Low Trust, trust score 25/100.** crypto-kqh.netlify.app is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-21 by automated analysis. Classification confidence 64%. | Field | Value | | --- | --- | | What this site appears to be | The page is a Netlify-hosted 'Site not found' 404 error screen. It contains no site content, forms, claims, or business information, so no trust or risk assessment beyond 'insufficient information' can be made. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 1 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 1% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear | | Domain age | 15 days old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (1 snapshot) | Clear | | Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted | ## The page as captured ![Screenshot of the crypto-kqh.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/crypto-kqh.netlify.app/screenshots/first.png) _What crypto-kqh.netlify.app served when TrustSniffer captured it on 2026-10-21. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Overview This website is a subdomain on a shared hosting platform's domain, and its crypto-themed hostname hints at a digital-asset project. The homepage shows only the platform's generic "Site not found" error screen, which says the address does not exist on the platform. It offers no products, pricing, navigation, forms, or business claims, so no purpose or business model can be seen. It reads as an unpublished, removed, or not-yet-deployed placeholder, not an operating business. ### Scam/Impersonation Risk The decisive contradiction is a confirmed external blacklist hit. Security-reputation sources currently flag this hostname, with one detection rated malicious and one rated suspicious. The page itself carries no fraud copy, so the risk comes from the listing and from what the hostname could become. A crypto-flavoured name on a hosting platform's shared domain can be switched to a different front-end without any visible change in ownership. That makes it a recognised staging pattern for wallet-themed phishing or investment lures. The platform's own error branding is also closely mirrored by the hostname's parent domain, which raised a lookalike flag. This is a weak, structural resemblance, not a confirmed impersonation. The sandbox also recorded concealed form elements and password-type fields across all three runs, together with very large page-structure changes after interaction. These are unusual for a static error page, and they are consistent with content being swapped or injected at load time. No conflicting legal identities were found, because the page names no operator. Evidence: - Homepage: external reputation sources currently flag the hostname, with one malicious and one suspicious detection. - Homepage, sandbox behaviour: hidden forms and password-type fields appeared in all three runs on a page that displays no form. - Homepage, sandbox behaviour: roughly 4,130 page-structure mutations were recorded after interaction on an error screen with 368 characters of visible text. - Domain provenance: the hostname is about 15 days old, and the web archive holds a single snapshot, first and last seen on 2026-10-05 (1 year tracked). ### Regulatory Verification Notes The site publishes no terms, privacy policy, about page, contact page, company name, licence, or registration number. Its only text is the hosting platform's boilerplate and a platform-generated internal reference. No operator can be tied to the site, and a real-world identity cannot be established from it. There is no regulatory claim to test, and the missing disclosures are not evidence of wrongdoing on their own. They do mean the site has no legitimacy of its own to weigh against the blacklist hit. Third-party abuse reports exist on one of the edge addresses serving the site. Those reports apply to a shared provider address, so they are a soft reputational signal and cannot be attributed directly to this site. The TLS certificate is a valid organisation-validated certificate, but its subject is the hosting platform and not any site operator. It therefore supports transport encryption only and says nothing about who runs this site. No third-party broker or regulatory-database entry matched the site. Evidence: - Homepage: no legal, policy, or contact content; only the platform's 404 text and a platform-generated internal reference. - Hosting infrastructure: served from AS16509 (AMAZON-02, Amazon.com, Inc., US). - Transport encryption: certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject Netlify, Inc, valid to 2027-03-19. - Abuse reports: 4 reports on the edge address 2a05:d014:58f:6200::258, last filed 26 days before analysis, categorised as shared Content Delivery Network infrastructure. ### What to Verify Next Anyone who received this address from a third party should first confirm through an independent, offline route that the sender actually operates a project at this location. The platform's error page is no proof of that. If a project is claimed, its operator should be asked to name the legal entity, give the official domain, and state any licence they hold, all through channels not supplied by the link. The hostname should be rechecked for threat-listing status after the operator confirms the site is live, since the current listing may reflect earlier or different content. If the address later serves a login, wallet, or payment interface, that new content should be re-assessed in full before any interaction. Official support and contact channels should be taken from the operator's independently confirmed materials. Evidence: - Homepage: no outbound links, contact details, or social profiles that could be used to cross-check an operator. - Homepage: the page offers only a generic prompt to build a site, which gives no project-specific information. - Domain provenance: the very short observed history gives no earlier content to compare against. ### Summary Verdict The overall posture is low trust with elevated risk. A confirmed external threat detection dominates the assessment. The page shows no content that could substantiate legitimacy, and the hostname is very new and unproven. Valid encryption and reputable hosting are not enough to offset these concerns. ### Infrastructure Integrity The site is served through Amazon's edge network, and all four observed addresses are edge servers. The origin server was not observable, and that edge-only visibility prevents independent verification of the true hosting. It can also mask rapid content swaps behind an unchanged address. The reputable edge provider and the valid certificate are mitigating factors only. They do not offset the external reputation risk. ### Closing Assessment Interaction beyond passive viewing is not advisable. No login, credential entry, wallet connection, or financial transaction should take place at this address. Any link that led here should be treated as unconfirmed until the sender is independently validated. _Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, history in the web archive, page content. ### 01 External reputation - A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`) ### 02 Behaviour in a sandbox - The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`) ### 03 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 04 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 05 Page content - The page appears to present itself as a known brand it is not verified to belong to. (Page content `rule:PAGE_BRAND_SUSPECTED`) ### Signals weighed against the site - AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of crypto-kqh.netlify.app. - The request stayed on crypto-kqh.netlify.app. It was not redirected to another domain. (Clear) - The earliest public archive of this site is from 2026-10-05. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 2a05:d014:58f:6200::258 | | Name servers | Not available | | CDN / edge network | Detected (aws) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | | SSL expiry | 2027-03-19 | | Domain age | 0.04 years (continuous registration) | | Domain expiry | Not available | | Archive first seen | 2026-10-05 | | Archive snapshots | 1 | | Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 1% confidence, 4 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about crypto-kqh.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [crypto-alp.netlify.app](https://trustsniffer.com/report/crypto-alp.netlify.app), a similar name (Low Trust, 25/100) - [pump-voting-9s.netlify.app](https://trustsniffer.com/report/pump-voting-9s.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-0o9.netlify.app](https://trustsniffer.com/report/portal-moonshot-0o9.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-d03.netlify.app](https://trustsniffer.com/report/portal-moonshot-d03.netlify.app), a similar name (Low Trust, 25/100) - [memecoin-claims-now.netlify.app](https://trustsniffer.com/report/memecoin-claims-now.netlify.app), a similar name (Low Trust, 25/100) - [crypto-uei.netlify.app](https://trustsniffer.com/report/crypto-uei.netlify.app), a similar name (Low Trust, 25/100) - [crypto-pgc.netlify.app](https://trustsniffer.com/report/crypto-pgc.netlify.app), a similar name (Low Trust, 25/100) - [crypto-zfq.netlify.app](https://trustsniffer.com/report/crypto-zfq.netlify.app), a similar name (Low Trust, 25/100) - [trouserstreak.net](https://trustsniffer.com/report/trouserstreak.net), another site assessed as low-trust (Low Trust, 25/100) - [ficus.in](https://trustsniffer.com/report/ficus.in), another site assessed as low-trust (Low Trust, 40/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens) - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) --- *Source: [TrustSniffer](https://trustsniffer.com/report/crypto-kqh.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/crypto-kqh.netlify.app · assessed 2026-10-21.*