Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
crypto-rdy.netlify.app shows high-risk / scam indicators.
| What this site appears to be | Default Netlify 'Site not found' 404 page indicating that the requested site or path does not exist. It contains no business content, forms, links, or claims to assess. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 1% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | 15 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This web address resolves to a default hosting-platform "Site not found" error page rather than a functioning website. It carries no company branding, products, navigation, or claims, and the page itself says the requested path does not exist on the Netlify hosting service. The address sits on a free shared-hosting subdomain with a crypto-themed name, so no business model or operator purpose can be read from the content. In practice it is an unclaimed or emptied placeholder that could be filled with different content later.
Scam/Impersonation Risk
The address has been placed on an external blacklist by at least one threat-intelligence source. A small number of reputation engines also flagged it as malicious or suspicious, which is the decisive negative signal in this assessment. The homepage shows nothing visible, yet automated browsing sessions detected hidden forms in every run, including password-type fields. Visible content, by contrast, offers no login or form. A page that displays only an error screen but carries concealed credential-capture elements is a recognised pattern in phishing staging. The same sessions recorded a very large volume of page changes after interaction and almost entirely third-party network traffic. This is atypical for a static error page and suggests content that changes or loads after the visitor engages. The subdomain name was also assessed as a close lookalike of the hosting platform's own brand, which supports the possibility of impersonation. Impersonation of a specific brand was not confirmed. No conflicting legal identities appeared, because the page publishes no identity information at all. The convergence of blacklisting, concealed credential fields, and unstable page behaviour on a near-empty placeholder warrants a clearly cautionary posture.
- Homepage: the only visible content is the hosting provider's standard "Site not found" notice, with no visible forms, links, or business claims.
- Homepage behaviour: hidden forms, including password fields, were detected in all three automated sessions despite no visible form.
- Domain provenance: registered in 2026, about 13 days old at the time of analysis.
- Naming: the crypto-themed subdomain on a shared hosting platform was assessed as a strong lookalike of that platform's brand.
Regulatory Verification Notes
The site publishes no legal pages, terms, privacy policy, company name, licence, or registration number, so there is nothing to assess against a regulator's register. This is expected for an error page and is a verification limitation, not evidence of a scam on its own. The operator behind the subdomain cannot be tied to any real-world person or organisation, and ownership and governance are opaque. No third-party broker or regulatory listing matched this site, so there is no external regulatory context to weigh. The adverse view therefore rests on the reputation and behavioural findings above, not on the missing disclosures.
- Homepage: no company name, licensing statement, contact page, or legal documentation is present.
- Web-archive history: a single archive snapshot dated 2026-10-06, with one year tracked, so there is no meaningful operating history.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV) to Netlify, Inc., valid to 2027-03-19. It validates the hosting platform, not the subdomain's operator.
What to Verify Next
No business relationship should proceed until the operator is identified through a channel independent of this address. Confirm whether a legitimate organisation claims this subdomain by checking its official website or published materials for a link to it. Any invitation that led to this address should be re-verified through the sender's known, separately obtained contact details. If the subdomain was promoted as a crypto service or platform, confirm that service's licensing status directly with the relevant financial regulator's public register. Reputation status should be re-checked after any later change in content, since the page is currently a placeholder and could be swapped without notice.
- Homepage: no operator, product, or service is named that could be checked against a registry.
- Hosting platform: the error text states the site is unavailable at this path, consistent with an unclaimed, deleted, or not-yet-deployed project.
- Blacklist listing: current external listing means any later content on this address should be treated as untrusted until it is cleared.
Summary Verdict
The assessment is a high-risk, clearly cautionary one. A confirmed external blacklisting and concealed credential-type form behaviour outweigh the technically valid encryption and the ordinary hosting platform. The address has no verifiable operator, no operating history, and no legitimate business content to counterbalance those findings.
Infrastructure Integrity
The site is served through Amazon's cloud and edge network behind the Netlify platform, and all observed addresses are edge nodes, so the true origin is not visible. This is normal for the platform and is a mitigating factor only. It cannot offset the reputation findings, and it limits independent hosting verification and the ability to detect fast content swaps. Four abuse reports exist against a shared edge address used by this deployment. They relate to shared provider infrastructure and are not specific to this site, so they carry limited weight.
Closing Assessment
Treat the address as unsafe for any sign-in, credential entry, wallet connection, or financial interaction. Passive viewing is the only reasonable use, and nothing should be downloaded from it. Any request routed to this address should be refused or reported to the party that supplied the link.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, history in the web archive, page content.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
05 Page content
- The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of crypto-rdy.netlify.app.
- The request stayed on crypto-rdy.netlify.app. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2026-10-06. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::258 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-10-06 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 1% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about crypto-rdy.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.