Is crypto-yfo.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Overview

This website is a placeholder page served from a free-tier subdomain on a public site-hosting platform. It shows only a generic "Site not found" error stating that the requested address does not exist on that platform. The page offers no products, pricing, forms, links, contact details or business content. Its name suggests a crypto-related project, but nothing visible supports any stated purpose or business model.

Scam/Impersonation Risk

The overall picture is cautionary, with confirmed contradictions present. The site is blacklisted by threat-intelligence sources, and several detection engines independently flag it as malicious or suspicious. This is the decisive finding. No conflicting legal identities appear, because the page names no entity at all. The page text is also a copy of the hosting platform's own error notice, and the subdomain name closely resembles that platform's branding. That makes brand-lookalike abuse a credible concern, although this evidence does not establish deliberate impersonation. Automated browsing runs also recorded behavior at odds with the empty page. Hidden form elements, including password-type fields, appeared in every run. The page's structure changed heavily after interaction, and the browser made a large volume of external requests and posts. A genuine error page would not normally behave this way, so the visible 404 may be a decoy or a staging shell for content that can be swapped in later. Four abuse reports exist against a shared hosting address that serves many unrelated tenants. They are a soft reputational signal and are not attributed to this site specifically. Evidence:

• Homepage: shows only the platform's generic "Site not found" notice, with no forms, links or business content visible to a visitor.
• Homepage, automated browsing: hidden forms were detected in 3 of 3 runs, and password-type inputs were present despite the empty visible page.
• Homepage, automated browsing: about 4,130 page-structure mutations after interaction and roughly 21 external POST requests, all to destinations on the approved list.
• Domain registration: the domain is about 13 days old (~0.04 years). The web archive holds 1 snapshot, first and last seen 2026-10-07 (1 year tracked).

Regulatory Verification Notes

The site discloses no company name, jurisdiction, license, registration number or terms. The page is an error stub, so no legal or identity page exists to assess. This is a verification gap, not evidence of misconduct. It is a notable gap here only because the name points to crypto activity, which normally sits under financial regulation. Nothing indicates the operator is regulated, and no third-party broker or regulator record matched the domain. Real-world identity is unverified, and registrant details are incomplete, so ownership is opaque. The TLS certificate is valid, but this proves only encrypted transport. It says nothing about who runs the site or whether it is legitimate. Evidence:

• Homepage: no operator, address, license or registration disclosure, and no contact details.
• Site hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), IP in the United States.
• Transport encryption: an organization-validated (OV) TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc., valid to 2027-03-19. The certificate belongs to the hosting platform, not to an independent operator.

What to Verify Next

Any interaction should begin with confirming who operates this address and whether it belongs to a genuine project. Any claimed project owner should provide the exact official domain through an independent channel, such as a verified social account or an established listing for the project. A claim of crypto services should be checked against the relevant financial regulator's public register before any engagement. If a login or wallet prompt ever appears at this address, it should be treated as untrusted until the platform and the operator are independently confirmed. The official support and contact channels should be confirmed through an offline or independently sourced route. Evidence:

• Homepage: no operator identity or project reference exists to validate.
• Domain registration: the domain is about 13 days old, so no long track record exists to lean on.
• Site hosting: the address is a subdomain on a shared hosting platform, so ownership cannot be inferred from the domain itself.

Summary Verdict

The site carries an elevated risk posture. Confirmed threat-intelligence detections, behavior inconsistent with its blank appearance, and a very recent, unattributable footprint outweigh the technically valid encryption and mainstream hosting. Available evidence does not support treating it as legitimate.

Infrastructure Integrity

The site sits behind AWS-hosted edge infrastructure, and all four observed addresses are edge servers within AS16509. The true origin server was not observable. Protective hosting and a valid certificate are mitigating factors only. They cannot offset the reputational detections, and edge-only visibility makes it harder to verify hosting independently and to detect rapid content swaps.

Closing Assessment

Interaction should be limited to passive viewing. Credentials, wallet connections, downloads and payments should be avoided entirely until the operator is independently identified and the threat-intelligence listings are cleared.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.