Is crypto-qgk.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Overview

This website is a single-page placeholder on a free subdomain of a public static-site hosting platform. The captured homepage shows only the text "redirecting.." and has no title, navigation, links, forms, products or metadata. It appears to exist to forward visitors to a destination that was not captured, so the underlying business model cannot be determined.

Scam/Impersonation Risk

The decisive concern is that the site is blacklisted by external threat-intelligence sources. A multi-engine reputation scan returned one malicious and two suspicious detections, which makes this a confirmed reputational contradiction rather than a speculative one. The hostname carries a crypto-themed label, but the homepage contains no content, product or service to support it. A bare redirect page is a common way to hide where a visitor ends up, because the real destination can be swapped without any change visible on the page. A brand-similarity check also matched the hostname to the hosting platform's own domain. This is consistent with the name being a self-chosen subdomain under that platform's shared domain, and it does not indicate endorsement by the platform. Four abuse reports exist for one of the shared hosting addresses, but they attach to infrastructure used by many tenants, so they are weak evidence against this site specifically. Dynamic testing was benign: no wallet prompts, hidden forms, cloaking, clipboard manipulation or third-party requests. This shows the placeholder itself does nothing hostile. It does not clear the destination it points to. No conflicting legal identities were found. Evidence:

• Homepage: the captured content is only the text "redirecting..", with no links, forms or metadata, and the final destination was not captured.
• External reputation: the multi-engine scan recorded 1 malicious and 2 suspicious detections, and an external blacklist hit is confirmed. The 4 abuse reports apply to a shared provider address.
• Domain provenance: the domain is about 18 days old (registered 2026). The web archive holds 59 snapshots, all from 2026 (1 year tracked), so the site has essentially no established history.
• Sandbox behaviour: 3 of 3 runs returned stable HTTP 200 responses with zero external network activity, zero console errors and no cloaking.

Regulatory Verification Notes

The site gives no legal, identity or compliance information. The homepage has no company name, terms, privacy notice, contact page or licensing claim, so none can be assessed, and the real-world operator is not independently verified. No financial offering is visible, so no licence is claimed or contradicted. The valid transport-encryption certificate is issued to the hosting platform, not to the site's operator, so it confirms the connection is encrypted but says nothing about who runs the site. No third-party broker record is associated with it. Evidence:

• Homepage: no company name, registration number, licence, terms of service or privacy policy is present.
• Transport encryption: the TLS certificate is an OV certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19. The subject is the platform, not the site's operator.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), with the registry shown as ARIN.

What to Verify Next

Before any engagement, the redirect's real destination should be identified safely, for example by loading the page in an isolated, disposable environment with no accounts or wallets attached. Any destination should then be assessed on its own merits. The reputation detections should be re-checked once real content is served, and a platform abuse report can be filed if the redirect leads to a harmful page. If the destination turns out to offer financial or crypto services, the relevant licensing registry should be consulted. Any claim to be an official service should be confirmed through the claimed organisation's own channels, reached by an independent route. Until then no reliance should be placed on this page. Evidence:

• Homepage: the redirect target is not recorded, so its identity and legitimacy are untested.
• Reputation: the external blacklist hit and the multi-engine detections were present at the time of analysis and may change as the site changes.
• Behaviour: no forms, wallet interactions or external requests were observed on the placeholder itself.

Summary Verdict

The assessment is clearly cautionary. Confirmed adverse reputation, a very new domain with no track record, an empty page and no verifiable operator together outweigh the mitigating technical hygiene. The evidence supports at most read-only observation. It does not support treating the site as legitimate.

Infrastructure Integrity

The site is delivered through Amazon's CDN/WAF edge, and every observed address is an edge server. The origin server is not observable, which prevents independent confirmation of the real host and means content could be changed quickly behind the edge. The protective infrastructure and valid encryption are mitigating factors only. They do not offset the external threat detections and are not evidence of legitimacy.

Closing Assessment

Interaction should be limited to passive viewing. Credentials, account logins, wallet connections and payments should not be entered or made on this site or on wherever it redirects, and nothing should be downloaded from it. The site should be re-assessed only if it later serves substantive content under a verifiable operator.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.