Is crypto-pbt.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Overview

This site is a subdomain on the Netlify hosting platform, and its name suggests a crypto-themed project. When analysed, it served only the platform's generic "Site not found" error page. The page shows no products, pricing, login, contact details, or business content. Its apparent purpose and business model are therefore undetermined, and it presents nothing that would let a visitor judge what the operator intends.

Scam/Impersonation Risk

The assessment contains a confirmed contradiction. The domain is blacklisted by external threat-intelligence sources, where one detection engine rated it malicious and another rated it suspicious. This is decisive for the cautionary posture, because a bare error page gives no content-based reason for such a listing. The sandbox also found concealed form structures that are inconsistent with a static error page. Three hidden forms, including password-type fields, appeared in every one of the three behavioural runs, although the visible page contains no forms. The page also produced a very large burst of DOM changes after interaction, far more than a static 404 would generate. Together these point to dormant or swappable content that is not shown to a casual visitor. The domain name resembles the hosting platform's own domain while using a crypto-themed label. The page-level review did not confirm impersonation, but the lookalike structure adds to the caution. Two abuse reports were recorded against a shared edge address belonging to the cloud provider's content-delivery range. They are attributed to shared infrastructure and discounted, so they are not counted as evidence against this site. No conflicting legal identities were observed. Evidence:

• Homepage: external reputation sources currently flag the domain, with one malicious and one suspicious detection.
• Homepage behaviour: hidden forms were detected in 3 of 3 sandbox runs, with password fields present, while the visible content is a 404 page with no forms.
• Homepage behaviour: 4,130 DOM mutations followed interaction on a page whose visible text is only a short error notice.
• Provenance: the domain was first seen on 2026-10-06 (~14 days old), with 1 archive snapshot and 1 year tracked.

Regulatory Verification Notes

The site offers no legal, terms, privacy, about, or licensing pages. The only page is the platform's error screen, so there is no company name, registration number, regulator reference, or licence claim to assess. This is a content gap, not evidence of wrongdoing, and it gives no reason to treat the operator as a regulated or accountable entity. Real-world operator identity remains unverified. No third-party broker or regulatory database record matched the domain, so no external reputational context exists beyond the threat listing above. The valid transport-encryption certificate is issued to the hosting platform, not to the operator. It shows that the platform's connection is encrypted and says nothing about who runs this site. Evidence:

• Homepage: no operator, legal entity, licence, or contact disclosure; the page only directs site owners to the platform's troubleshooting guide.
• Hosting: served from AS16509 (Amazon-02, US).
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19.
• Broker and regulatory databases: no match.

What to Verify Next

Before any engagement, establish whether the project behind this address exists at all. Ask the party that supplied the link for the official website, and compare it with an address obtained independently, such as an official social profile or a documented source that was not reached through this link. Confirm any claimed licensing or entity registration directly with the relevant registry, not through this domain. Confirm official support and contact channels offline or through independently sourced routes. Re-check the domain's threat listing status later, since a delisting or a content change would materially alter this assessment. Evidence:

• Homepage: no project description, team, or product exists on the page to cross-check.
• Threat listing: the current listing and the concealed forms are the unresolved items that would need clearing.
• Domain age: the very recent first appearance means no long track record exists to lean on.

Summary Verdict

The site sits in a low-trust, elevated-risk posture. A confirmed reputation listing and unexplained hidden form behaviour outweigh the minimal, content-free page. Nothing on the site supports a legitimacy conclusion, and its operator identity is unverified.

Infrastructure Integrity

The site is delivered through the cloud provider's CDN/WAF layer. All four observed addresses are edge nodes, and no origin server was identifiable. This protective infrastructure is a mitigating factor only. It offers no assurance about the operator's intent and cannot offset the reputation listing. Edge-only visibility also prevents independent verification of the underlying hosting, and it can allow content to be swapped quickly without any visible change in infrastructure.

Closing Assessment

Treat this address as read-only at most. Do not log in, enter credentials, connect a crypto wallet, or make any payment or financial commitment through it. Re-engage only if the operator's identity and the site's purpose are independently confirmed and the threat listing is cleared.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.