Is crypto-uff.netlify.app a scam? TrustSniffer's high-risk assessment: 1/100

Overview

This website is a subdomain on a public application-hosting platform whose name suggests a crypto-related project. When visited, it shows only the platform's generic "Site not found" error page. The page has no products, services, login, commerce or contact content, apart from a generic invitation to build a site on the host. No business model is visible, and the site's apparent purpose cannot be determined from what it serves.

Scam/Impersonation Risk

The assessment is high-risk, and contradictory signals are present. The domain is on an external blacklist, with at least one detection engine flagging it as malicious and another as suspicious. Prior phishing associations are also recorded against it. The hostname closely resembles the hosting platform's own brand, which raises the possibility that the address is intended to pass as something it is not. The visible page does not match this, since it advertises nothing. Behavioural testing found hidden forms in all three runs, including password-type fields, even though the page appears to be an empty error screen. Testing also saw very large page rewrites after interaction and an overwhelmingly external network footprint. Content that is invisible to a visitor but capable of collecting credentials is a classic pattern in phishing staging and rapid content swaps. No conflicting legal identities were found, and the sandbox saw no wallet-connection or clipboard-hijack behaviour. Four abuse reports are recorded against a shared provider address that this site resolves to. These are attributed to shared infrastructure rather than to this site alone, so they are weighted accordingly. The blacklist hit, the prior phishing association and the hidden-form behaviour are not discounted. Evidence:

• Homepage: serves a default hosting-platform 404 page of about 368 characters, with no visible forms, yet three of three sandbox runs detected hidden forms with password fields.
• Domain provenance: registered in 2026 (about 15 days old), with 1 archive snapshot spanning 2026 (1 year tracked), so there is no meaningful history.
• External reputation: the domain is listed on an external blacklist, with one malicious and one suspicious engine verdict.
• Homepage behaviour: DOM mutations reached 4,130 after interaction, and about 99.6% of network activity was directed to external hosts.

Regulatory Verification Notes

The site makes no licensing, registration or regulatory claim, and no terms, privacy, about or legal pages exist to assess. Its operator is not independently connected to any real-world person or brand, so nothing supports treating it as a legitimate business. The absence of disclosures is a verification gap, not proof of wrongdoing. The risk conclusion rests on the blacklist and behavioural findings above. No third-party broker or regulatory-database entry exists for this site. The valid transport encryption is a baseline technical hygiene point. It is an organisation-validated certificate issued to the hosting platform, not to the operator of this site, so it says nothing about who runs it. Evidence:

• Homepage: contains no company name, licence, registration number or legal notice.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV) to Netlify, Inc, valid to 2027-03-19.
• Third-party broker database: no match found for this site.

What to Verify Next

Any claim that this address belongs to a legitimate project must be confirmed outside the site itself. Anyone who received this address through a message, advertisement or social post should trace that source and confirm independently that the sender is genuine. The project's official website should be located through a trusted channel, such as an established directory or the project's verified public profiles, and compared with this hostname. If the address was supplied as a login or wallet link, the intended organisation should be contacted through its published official support channels. It is also worth confirming whether the platform has already suspended or reported the site. Evidence:

• Homepage: shows no operator identity against which to check claims.
• Hostname: closely resembles the hosting platform's own brand.
• Sandbox testing: found hidden credential-type forms that no visible page element explains.

Summary Verdict

The overall posture is elevated risk. Confirmed external threat detections, together with concealed credential-capable forms on an otherwise empty and newly created site, outweigh the minimal baseline hygiene present. The evidence does not support treating the site as a legitimate, operating service.

Infrastructure Integrity

The site is served from addresses belonging to a major cloud provider's edge network, behind a trusted CDN/WAF. The origin server was not observable, so hosting cannot be independently verified from the edge alone. This is a mitigating factor only. The platform's shared, ephemeral nature means content can be swapped or removed rapidly, and the protections cannot offset the reputation risk established above.

Closing Assessment

Login, credential entry, wallet connection and any financial or payment interaction should be avoided entirely. Any visit should be limited to passive viewing, and nothing should be downloaded from the site. Anyone who has already entered credentials or approved a wallet request there should change the affected passwords immediately and review wallet permissions. The address should also be reported to the hosting platform's abuse channel.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.