Is crypto-mru.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website is a subdomain on the Netlify hosting platform, and its name suggests a cryptocurrency-related project. When visited, it serves only the platform's generic "Site not found" error page. The page says the requested address does not exist on the hosting service and invites visitors to build their own site. It shows no products, services, pricing, or business description, so its purpose and business model cannot be determined from what it currently displays.

Scam/Impersonation Risk

Contradictory signals are present, and they place this site in a clearly cautionary category. Several independent threat-intelligence sources currently flag the domain as malicious or suspicious, and it is blacklisted on the strength of those detections. The page also resembles the hosting platform's own error page, and the domain name is a close lookalike of that platform's brand. That is a pattern commonly used to stage credential-harvesting pages behind a familiar interface. The page visibly offers no login or form, yet automated sandbox runs found concealed forms on every visit, including password-type fields. The page layout also changed heavily after interaction, so what is rendered is not necessarily all that the page contains. A hidden credential form behind a blank error page is a recognised staging pattern for phishing kits. This should be treated as a serious concern rather than a technical curiosity. Separately, abuse reports exist against one of the shared network addresses serving the site. Those reports belong to a shared content-delivery address used by many unrelated sites, so they are weak evidence about this domain on their own. No conflicting legal identities were observed. Evidence:

• Homepage: a generic hosting-platform 404 page with no content, forms, links, or business description, while the sandbox detected concealed forms in all three runs, including password-type fields.
• Homepage: roughly 4,100 page mutations recorded after interaction, and heavy external network activity relative to the page's visible content.
• Domain provenance: first observed in the web archive on 2026-10-07, about 13 days old, with a single archive snapshot (1 year tracked) and no prior history.
• Network reputation: 4 abuse reports on a shared CDN address (Amazon Data Services Ireland), attributed to shared infrastructure rather than to this site.

Regulatory Verification Notes

The captured page contains no legal, terms, privacy, about, or contact content. It names no operating company, registration number, licence, or regulator. The real-world operator therefore cannot be independently connected to any person or organisation, and the site's governance is opaque. No third-party broker or regulatory-database entry corresponds to this domain. The site makes no regulated-service claims, so there is no licence to test against a registry. However, a name that evokes cryptocurrency, combined with the threat detections above, means any later claim of financial or investment services would warrant strict scrutiny. The transport-encryption certificate is valid, but it is an organisation-validated certificate issued to the hosting platform, not to the site's operator. It therefore says nothing about who runs the domain. Evidence:

• Homepage: no operator name, legal entity, licence number, or regulator is displayed.
• Transport encryption: the TLS certificate was issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV) to Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).

What to Verify Next

Any contact with this domain should start by confirming, through an official channel, whether the project or brand it suggests actually exists and whether it owns this address. A link to this address received through email, messaging, or social media should be checked with the sender through a separate, independent route. If the address is meant to be a legitimate project, its owner should confirm the official domain and the official support channels. A legitimate project would normally publish a full site with identifiable operator details. If the address appears in any message asking for logins, wallet connections, or payments, that message should be reported, and the content should not be opened. Evidence:

• Homepage: shows no destination, product, or operator that could be confirmed independently.
• Domain history: roughly two weeks of observed existence, which leaves no track record to rely on.

Summary Verdict

Available evidence supports an elevated-risk assessment. Active threat-intelligence detections, a lookalike of the hosting platform's brand, and concealed credential-capable forms on a page that appears empty outweigh the site's valid encryption certificate and its brand-new, unverified operator identity. The posture is cautionary and security-forward.

Infrastructure Integrity

The site is served through Amazon Web Services edge infrastructure (AS16509) and resolves to four edge addresses. No origin server was observable. This indicates hosting on a mainstream platform with a valid certificate. That is a mitigating factor only, because the platform hosts many unrelated sites. It does not offset the threat detections, and edge-only visibility prevents independent verification of the hosting and allows the content behind the page to be swapped quickly.

Closing Assessment

At most, the address should be treated as read-only. No credentials, wallet connections, or payment details should be entered, and nothing should be downloaded from it. Anyone who has already interacted with it should change any affected passwords and report the link to their security team or the hosting platform's abuse channel.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.