---
title: "Is crypto-l9k.netlify.app Safe? Risk Report, Score 25/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "crypto-l9k.netlify.app"
verdict: "Low Trust"
title: "Is crypto-l9k.netlify.app Safe? Warning Signs, Score 25/100"
trust_score: 25
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/crypto-l9k.netlify.app
assessed: 2026-10-21
---

# Is crypto-l9k.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

## Verdict


**Verdict: Low Trust, trust score 25/100.** crypto-l9k.netlify.app is low-trust and potentially risky.

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-21 by automated analysis. Classification confidence 75%.

| Field | Value |
| --- | --- |
| What this site appears to be | The page is the standard Netlify 'Site not found' 404 response, indicating the requested site or path does not exist on that hosting platform. It contains no service, product, or business content to assess. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 1 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 2 reports; shared hosting inflates reports) | Clear |
| Domain age | 22 days old (Most scam domains are under a year old) | Risk |
| Web archive | 1 snapshot (1 snapshot) | Clear |
| Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted |

## The page as captured


![Screenshot of the crypto-l9k.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/crypto-l9k.netlify.app/screenshots/first.png)

_What crypto-l9k.netlify.app served when TrustSniffer captured it on 2026-10-21. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.

## Full analysis


### Overview

This website is a subdomain on a shared application-hosting platform (Netlify) whose root page currently returns the platform's generic "Site not found" 404 response. The page contains no products, pricing, company identity, contact details or legal text. The subdomain label suggests a crypto theme, but the visible page offers no service, so no business model can be identified from it.


### Scam/Impersonation Risk

The assessment is cautionary because of a confirmed contradiction. The domain is **blacklisted** by external reputation sources, with one detection rated malicious and another suspicious. The behaviour observed in the page does not match its visible content. The homepage presents a bare error message, yet repeated automated sessions found concealed forms in every run, including password-type fields, and the page changed heavily after interaction. This points to markup that is not visible to a casual visitor and that can be activated or swapped in later. A hosted-subdomain 404 is also a common state for a throwaway or staging deployment before content is switched on. The domain name closely resembles the hosting platform's own domain, and the page analysis flagged this as a suspected brand lookalike, although no confirmed impersonation was recorded. Network behaviour shows rapidly rotating, ephemeral addressing, but no wallet-connection, clipboard-hijack or drainer activity was observed. The site's owner cannot be identified, so intent cannot be established, but the combination of a blacklist hit, concealed credential-style forms and an empty front page is a meaningful risk pattern. Evidence:

- Homepage: renders only the hosting platform's 404 notice (about 370 characters of text) and carries no title, description or business content.
- Automated sandbox, three of three runs: concealed forms were present on each run, with password-type fields, while no login form was visible.
- Automated sandbox: more than 4,000 page changes were recorded after interaction, which is very high for a static error page.
- Domain provenance: registered about 23 days ago (~0.06 years); the web archive holds 1 snapshot, in 2026, covering 1 year tracked.

### Regulatory Verification Notes

No licence, registration number, company name, jurisdiction or governance information appears anywhere on the site. The only reachable page is a platform error notice, so there are no legal or identity pages to assess. A missing licence is a verification gap and not evidence of wrongdoing in itself. Here it cannot be weighed on its own, because the site presents no regulated activity to license and the real-world operator cannot be linked to the domain. The domain is very new, and the ownership record is incomplete. No broker-reputation entry matches the site, and nothing suggests third-party regulatory coverage. Ownership therefore remains unattributed, and no legitimacy can be inferred from the infrastructure alone. Evidence:

- Homepage: contains no company name, licence claim, terms, privacy policy or contact page.
- Domain registration: created roughly 23 days ago, with an incomplete owner record.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject Netlify, Inc, valid to 2027-03-19. It belongs to the hosting platform and says nothing about the operator.

### What to Verify Next

Before any interaction, the operator should supply an independently confirmable identity and a stated purpose for the site. Any claimed financial or crypto-related offering should be checked against the relevant national financial-regulator register, using the register's own search rather than links from this site. Where this site is promoted through an advertisement, message or social profile, the referrer should be confirmed through an independent, offline route. The official channels of any brand this subdomain appears to imitate should be checked, and the domain should be compared with them. It should be re-assessed once real content is published, since the current state is not representative of what visitors may later be shown. Evidence:

- Homepage: no operator, product or contact information is published to check against.
- Domain registration: very recent creation, so no operating history exists to rely on.
- Reputation checks: the blacklist detection should be re-queried after any cleanup or content change.

### Summary Verdict

The site carries an elevated risk assessment and a low trust classification. A confirmed blacklist hit, concealed form behaviour that contradicts the visible page, and an unverified, newly created identity converge on a cautionary posture. Valid encryption and reputable hosting do not offset these signals.


### Infrastructure Integrity

The site sits behind AWS-based CDN and edge infrastructure, with all observed addresses belonging to shared edge servers and no origin address observable. This is a mitigating factor only, and it also prevents independent verification of where the content is actually served from. Two abuse reports were recorded against one of the shared edge addresses. They apply to the shared provider address, so they are discounted and not attributed to this site.


### Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial transaction. Passive viewing is the only reasonable interaction until the operator is independently identified and the blacklist detection is cleared.


_Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, history in the web archive, page content.

### 01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`)

### 02 Behaviour in a sandbox
- The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`)

### 03 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### 04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 05 Page content
- The page appears to present itself as a known brand it is not verified to belong to. (Page content `rule:PAGE_BRAND_SUSPECTED`)

### Signals weighed against the site

- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of crypto-l9k.netlify.app.

- The request stayed on crypto-l9k.netlify.app. It was not redirected to another domain. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | 0.06 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 0% confidence, 2 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about crypto-l9k.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [crypto-t4j.netlify.app](https://trustsniffer.com/report/crypto-t4j.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-yx9.netlify.app](https://trustsniffer.com/report/crypto-yx9.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-br2.netlify.app](https://trustsniffer.com/report/crypto-br2.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-sni.netlify.app](https://trustsniffer.com/report/crypto-sni.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-lps.netlify.app](https://trustsniffer.com/report/crypto-lps.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-ob4.netlify.app](https://trustsniffer.com/report/crypto-ob4.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-pwy.netlify.app](https://trustsniffer.com/report/crypto-pwy.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-cl3.netlify.app](https://trustsniffer.com/report/crypto-cl3.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-2mw.netlify.app](https://trustsniffer.com/report/crypto-2mw.netlify.app), a similar name (Low Trust, 25/100)
- [portal-moonshot-59a.netlify.app](https://trustsniffer.com/report/portal-moonshot-59a.netlify.app), a similar name (Low Trust, 25/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/crypto-l9k.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/crypto-l9k.netlify.app · assessed 2026-10-21.*