---
title: "Is crypto-kqv.netlify.app a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "crypto-kqv.netlify.app"
verdict: "Critical Risk"
title: "Is crypto-kqv.netlify.app a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/crypto-kqv.netlify.app
assessed: 2026-10-22
---

# Is crypto-kqv.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** crypto-kqv.netlify.app shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 2 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 2 reports; shared hosting inflates reports) | Clear |
| Domain age | 18 days old (Most scam domains are under a year old) | Risk |
| Web archive | 206 snapshots (206 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted |

## The page as captured


![Screenshot of the crypto-kqv.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/crypto-kqv.netlify.app/screenshots/first.png)

_What crypto-kqv.netlify.app served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website is a subdomain on a shared static-hosting platform, and its name suggests a cryptocurrency theme. The captured homepage shows only a generic "site not found" placeholder with a very small amount of text. It presents no products, branding or stated business model, so its apparent purpose cannot be established from visible content. Automated browsing nonetheless detected active form and script behaviour behind the placeholder.


### Scam/Impersonation Risk

Multiple independent reputation sources flag this site, and the site appears on a **confirmed blacklist** from third-party threat intelligence. At least two security engines classify it as malicious and one more as suspicious. The archive record also carries a known-phishing indicator, so this is a hard contradiction and not a soft reputational concern. Behavioural testing supports this. Three-of-three sandbox runs found hidden forms and password-capable forms, although the visible page is only a placeholder. Interaction triggered very large DOM mutations, a pattern consistent with content being injected or swapped after load. Nearly all network traffic went to external destinations. None of the external destinations was unfamiliar, and no wallet-drainer, clipboard-hijack or cloaking behaviour was observed. Two abuse reports exist against a shared cloud-provider edge address. These are discounted as shared-infrastructure noise and are not attributed to this site. The domain's own detections, a placeholder front with concealed credential-capable forms, and a crypto-themed name on a very new domain are together consistent with a staging or lure page. This does not establish that any specific brand is being impersonated, and no conflicting legal identities were observed. Evidence:

- Homepage: returned a "Site not found" error page with only minimal text, yet hidden forms, including password forms, were detected in every sandbox run.
- Homepage behaviour: roughly 4,130 DOM mutations after interaction and up to 99.6% of network activity directed to external hosts.
- Domain provenance: registered in 2026 (~20 days old, ~0.05 years).
- Archive depth: 206 snapshots, all within 2026 (1 year tracked).

### Regulatory Verification Notes

The captured homepage shows no operator name, legal entity, licence, registration number or terms page. Operator identity remains unverified, and ownership and governance are opaque. This is a transparency gap on the site and not a finding of fraud in itself. Here it compounds the confirmed threat detections instead of standing alone. No financial-services or broker reputation record matched, so there is no third-party regulatory context to rely on. Transport security shows an organisation-validated certificate issued to the hosting platform. This indicates only that the platform's shared certificate is valid. It does not identify whoever operates this particular subdomain. Evidence:

- Homepage: no company name, licence number or legal disclosure is visible.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV) to Netlify, Inc, valid to 2027-03.
- Broker reputation lookup: no matching record.

### What to Verify Next

Any claim that this site belongs to a real company or crypto service should be checked through channels independent of the site. A prospective user should locate the claimed operator's official website through a trusted source such as a regulator register or an established directory, and confirm that this subdomain is formally listed there. Anyone who received this address through an unsolicited message, advertisement or social post should confirm with the apparent sender, using a separately sourced contact route, that they actually sent it. Security teams may wish to re-test the page to see whether the concealed forms and script behaviour change over time, and to report the address to the hosting platform's abuse desk. Any claimed licensing should be checked directly with the relevant registry, using the registry's own search. Evidence:

- Homepage: no named operator or official affiliation to cross-reference.
- Hidden forms: credential-capable fields present in all runs, so the contents need independent inspection.
- Reputation sources: multiple detections currently active against this address.

### Summary Verdict

The site carries an elevated risk posture. Confirmed third-party blacklist hits, concealed credential-capable forms behind an empty front page, and a very recent domain converge on a clearly cautionary assessment. The valid certificate and a long-running, legitimate hosting platform are only mitigating factors. They do not offset the threat detections, and the real-world operator remains unidentified.


### Infrastructure Integrity

The site is served through Amazon Web Services edge infrastructure, which is a reputable and widely used platform. All four observed addresses are edge nodes, and the origin server is not observable. A trusted provider is a mitigating signal only. Shared hosting of this kind makes it easy to launch short-lived sites and to swap their content quickly, so it provides no assurance about this subdomain's operator or content.


### Closing Assessment

Limit interaction to passive viewing. Do not enter credentials, connect wallets, make payments or submit personal data, and do not download anything from this address. Treat any link that leads here as hostile until independent confirmation says otherwise.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`)
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page replaced a large part of its own content after loading. (Behaviour in a sandbox `rule:BEHAV_DOM_CHANGE_HIGH`)

### 03 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### Signals weighed against the site

- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of crypto-kqv.netlify.app.

- The request stayed on crypto-kqv.netlify.app. It was not redirected to another domain. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | 0.05 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 206 |
| Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 2 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about crypto-kqv.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [sol-interface.netlify.app](https://trustsniffer.com/report/sol-interface.netlify.app), a similar name (Critical Risk, 0/100)
- [coincommunityvotingopenzone.netlify.app](https://trustsniffer.com/report/coincommunityvotingopenzone.netlify.app), a similar name (Critical Risk, 0/100)
- [claim-meme.netlify.app](https://trustsniffer.com/report/claim-meme.netlify.app), a similar name (Critical Risk, 14/100)
- [ponsvote-listingv1.netlify.app](https://trustsniffer.com/report/ponsvote-listingv1.netlify.app), a similar name (Critical Risk, 0/100)
- [crypto-sbz.netlify.app](https://trustsniffer.com/report/crypto-sbz.netlify.app), a similar name (Critical Risk, 2/100)
- [robinhood-main-dex-uvm.netlify.app](https://trustsniffer.com/report/robinhood-main-dex-uvm.netlify.app), a similar name (Critical Risk, 0/100)
- [crypto-zhq.netlify.app](https://trustsniffer.com/report/crypto-zhq.netlify.app), a similar name (Critical Risk, 2/100)
- [crypto-s8t.netlify.app](https://trustsniffer.com/report/crypto-s8t.netlify.app), a similar name (Critical Risk, 0/100)
- [collect-fifacashback.com](https://trustsniffer.com/report/collect-fifacashback.com), another site assessed as critical-risk (Critical Risk, 3/100)
- [gme-bull.xyz](https://trustsniffer.com/report/gme-bull.xyz), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/crypto-kqv.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/crypto-kqv.netlify.app · assessed 2026-10-22.*