Is crypto-zpt.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Overview

This website is a subdomain on Netlify's free hosting platform. Its hostname suggests a crypto-themed project. When visited, it serves only the platform's default "Site not found" error page, which says the link is broken or the address does not exist. The page shows no products, pricing, company description, contact details or payment flow. Its apparent purpose therefore cannot be determined from what is publicly presented, and it currently looks like an unpublished or abandoned project placeholder.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is clearly cautionary. A third-party threat-intelligence listing currently flags this hostname: one detection engine rates it malicious and another suspicious, and the listing is a confirmed blacklist hit. The behavioural sandbox also recorded concerning activity across all three test runs. Hidden forms were detected on every run, and password-type input fields were present even though the visible page is only an error notice. After interaction the page's structure changed very heavily, with thousands of DOM mutations, which is far more than a static 404 page should produce. Almost all network traffic went to external destinations. None of it went to non-whitelisted endpoints, which limits but does not remove the concern. The mismatch between a blank-looking page and concealed credential-capable forms is the most material behavioural anomaly. The hostname also closely resembles the hosting platform's own domain, and the page is visually the platform's default notice. This gives a visitor little way to tell a genuine placeholder from a staged shell that content could be swapped into later. No conflicting legal identities were found, because the page names no entity at all. The blacklist hit and the hidden-form behaviour alone justify elevated caution. Evidence:

• The homepage serves only the default hosting-provider 404 notice, with a platform-issued internal reference ID and a "Start building" prompt, and no operator content.
• Hidden forms were detected in 3 of 3 sandbox runs, with password-type fields present and a maximum DOM diff of 4,130 mutations after interaction.
• Network telemetry recorded 36 external requests (15 external XHR/fetch calls and 21 external POSTs), with about 99.6% of peak traffic external and none to non-whitelisted destinations.
• The domain is about 11 days old, with a single archive snapshot first and last seen on 2026-10-08.

Regulatory Verification Notes

The captured page contains no legal, terms, privacy, about or contact pages, and it names no company, registration number or licence. The site's real-world operator therefore cannot be tied to any entity from on-site evidence, and no regulated status is claimed or can be inferred. This is a disclosure gap rather than a finding of wrongdoing. The site's identity remains unverified. The transport encryption looks proper but says nothing about the operator. The certificate is organisation-validated, but the subject organisation is the hosting platform rather than the site's owner. Four abuse reports exist against a shared edge address serving this hostname. They are best read as a soft reputational signal from shared infrastructure, not as proof of this site's conduct. No broker-review database entry matches the site. Evidence:

• The homepage lists no operator name, licence, registration number or support channel.
• The TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, and valid to 2027-03-19.
• The site is served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Four abuse reports, last logged about 26 days before analysis, attach to a shared CDN-range address that is not specific to this site.

What to Verify Next

Anyone expecting a legitimate service at this address should first obtain the official web address from an independent channel, such as the claimed brand's verified social profiles, a printed document or a direct call, and compare it character by character with this hostname. If a regulated financial or investment offering is claimed, the named entity's authorisation should be checked directly on the relevant regulator's public register, not through any link supplied by this site. The listing status should be re-checked later, since a flagged hostname that is cleaned or taken down changes the picture. Until then, official support and contact channels should be confirmed through an offline route. Evidence:

• The homepage gives no content that would let a visitor confirm which brand or project the hostname is meant to represent.
• The hostname's crypto-style naming is not backed by any crypto-related content, token or wallet function on the captured page.
• The "Site not found" page indicates that no published deployment currently exists at the requested path.

Summary Verdict

The assessment is low trust with elevated risk. A confirmed external threat listing and concealed form behaviour outweigh the technically sound hosting and certificate hygiene. Apparent legitimacy cannot be established, since the operator is unidentified and the domain is very new.

Infrastructure Integrity

The site is delivered through Amazon's CDN/WAF layer. All four observed addresses are edge servers in Amazon's network, and the origin server was not observable. This protective hosting is a mitigating factor only. It reflects the hosting platform's quality and gives no assurance about the site's operator. Because only edge servers are visible, the underlying content could be replaced quickly without any change at the network level.

Closing Assessment

At most, the address should be viewed passively. No login credentials, passwords, wallet connections, personal data or payments should be entered, and nothing should be downloaded from it, until the operator is independently identified and the third-party listing is cleared.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.