---
title: "Is crypto-uei.netlify.app Safe? Risk Report, Score 25/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "crypto-uei.netlify.app"
verdict: "Low Trust"
title: "Is crypto-uei.netlify.app Safe? Warning Signs, Score 25/100"
trust_score: 25
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/crypto-uei.netlify.app
assessed: 2026-10-21
---

# Is crypto-uei.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

## Verdict


**Verdict: Low Trust, trust score 25/100.** crypto-uei.netlify.app is low-trust and potentially risky.

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-21 by automated analysis. Classification confidence 75%.

| Field | Value |
| --- | --- |
| What this site appears to be | The page is a Netlify-branded 'Site not found' 404 placeholder with no product, forms, links, or commercial content. The site's purpose and trustworthiness cannot be assessed from this capture. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 1 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 2 reports; shared hosting inflates reports) | Clear |
| Domain age | 15 days old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (1 snapshot) | Clear |
| Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted |

## The page as captured


![Screenshot of the crypto-uei.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/crypto-uei.netlify.app/screenshots/first.png)

_What crypto-uei.netlify.app served when TrustSniffer captured it on 2026-10-21. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This address is a subdomain on a shared application-hosting platform, and its homepage shows only the platform's generic "Site not found" error page. There is no product, branding, pricing, navigation, contact detail or commercial claim. The name of the subdomain suggests a crypto-related project, but the page itself presents no business model, so its purpose cannot be established from what the site displays.


### Scam/Impersonation Risk

A **confirmed external blacklist listing** is the decisive contradiction. Threat-intelligence reputation sources currently flag this address, with one engine rating it malicious and another suspicious. Two abuse reports also exist against an edge address in the hosting provider's shared pool. They are attributed to shared infrastructure and carry no confidence, so they are discounted and are not held against this site. A static error page cannot explain a blacklist listing, and the behavioral evidence points to something underneath it. Hidden forms were present on the page in every one of three observation runs, and password-type fields were detected despite no visible login interface. The page also produced a very large burst of DOM changes after interaction and heavy outbound request activity to third-party hosts. Together these suggest the visible 404 may be a thin front for content that is swapped or injected dynamically. The subdomain is also a close lookalike of the hosting platform's own brand. This is a weak impersonation indicator rather than a confirmed case. The site has existed only briefly, so there is no history to counter these signals. No conflicting legal identities were observed, because the page publishes none. Evidence:

- Homepage: the visible content is only the platform's "Site not found" notice, with no products, links, contact details or forms in view.
- Homepage behavior: hidden forms were detected in all three sandbox runs, with password-type fields and roughly four thousand DOM mutations after interaction.
- Domain provenance: approximately 15 days old, with a single archive snapshot (first and last seen 2026-10-05, 1 year tracked).
- Reputation: one malicious and one suspicious detection from external threat-intelligence engines, and no detection from the major browser safe-browsing service.

### Regulatory Verification Notes

The site publishes no terms, privacy policy, about page, company name, licence or registration number. The only page captured is the hosting error notice, so no legal or identity disclosures exist to assess. The operator cannot be connected to any real-world person or organization. No third-party broker or regulator record matched this site, so no external reputational context is available. The transport-layer facts are neutral. They show a working technical setup and say nothing about who runs the site or whether it is legitimate. Evidence:

- Homepage: no legal-entity name, licence, registration number, contact page or policy documents are present.
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), under the American registry.
- Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organization Netlify, Inc, valid to 2027-03-19. The certificate belongs to the hosting platform, not to an independent operator.
- Third-party broker database: no match.

### What to Verify Next

Treat the address as unverified until the operator is established through an independent channel. First, confirm through the official website or documented channels of any organization claiming this address that it actually operates it, rather than relying on anything reached through the address itself. Second, if a licence or registration is later claimed, confirm it directly in the relevant public registry. Third, re-test the address only from an isolated, non-production environment. Check whether the hidden forms and dynamic content still appear and whether the blacklist listings have cleared. Fourth, any contact channels supplied by a third party should be confirmed through an independent, offline route. Evidence:

- Homepage: no operator, licence or contact information is published that could be checked against a registry.
- Behavioral capture: hidden forms and password-type fields recur across runs, so a later re-test can show whether they persist.
- Reputation: the current external listings are the baseline against which any later clearance can be judged.

### Summary Verdict

The overall posture is **elevated risk**. A confirmed external blacklist listing, combined with concealed form and password-field behavior beneath an empty error page and a very recently created, unattributable presence, outweighs the neutral technical hygiene. The site cannot be treated as trustworthy and no legitimate purpose has been shown.


### Infrastructure Integrity

The site sits behind Amazon's content-delivery edge, and all four observed addresses are edge servers, so no origin host could be identified. The managed edge and a valid certificate are mitigating factors only and do not offset the reputational risk. Edge-only visibility also prevents independent verification of what is hosted and can mask rapid content swaps, which fits the dynamic behavior observed on the page.


### Closing Assessment

Read-only viewing in an isolated environment is the only proportionate interaction. Do not enter credentials, connect a wallet, submit personal data, or make any financial transaction at this address until the operator is independently established and the blacklist listings have cleared.


_Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, history in the web archive, page content.

### 01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`)

### 02 Behaviour in a sandbox
- The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`)

### 03 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### 04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 05 Page content
- The page appears to present itself as a known brand it is not verified to belong to. (Page content `rule:PAGE_BRAND_SUSPECTED`)

### Signals weighed against the site

- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of crypto-uei.netlify.app.

- The request stayed on crypto-uei.netlify.app. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2026-10-05. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-10-05 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 0% confidence, 2 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about crypto-uei.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [portal-moonshot-xz3.netlify.app](https://trustsniffer.com/report/portal-moonshot-xz3.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-uux.netlify.app](https://trustsniffer.com/report/crypto-uux.netlify.app), a similar name (Low Trust, 25/100)
- [portal-moonshot-6d4.netlify.app](https://trustsniffer.com/report/portal-moonshot-6d4.netlify.app), a similar name (Low Trust, 25/100)
- [portal-moonshot-2cf.netlify.app](https://trustsniffer.com/report/portal-moonshot-2cf.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-rtv.netlify.app](https://trustsniffer.com/report/crypto-rtv.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-pbt.netlify.app](https://trustsniffer.com/report/crypto-pbt.netlify.app), a similar name (Low Trust, 25/100)
- [crypto-2mw.netlify.app](https://trustsniffer.com/report/crypto-2mw.netlify.app), a similar name (Low Trust, 25/100)
- [portal-moonshot-59a.netlify.app](https://trustsniffer.com/report/portal-moonshot-59a.netlify.app), a similar name (Low Trust, 25/100)
- [oisywalletdesktop.com](https://trustsniffer.com/report/oisywalletdesktop.com), another site assessed as low-trust (Low Trust, 32/100)
- [project-shiesty.firebaseapp.com](https://trustsniffer.com/report/project-shiesty.firebaseapp.com), another site assessed as low-trust (Low Trust, 48/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/crypto-uei.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/crypto-uei.netlify.app · assessed 2026-10-21.*