--- title: "Is crypto-zpt.netlify.app Safe? Risk Report, Score 25/100" source: TrustSniffer type: Website trust & fraud report subject: "crypto-zpt.netlify.app" verdict: "Low Trust" title: "Is crypto-zpt.netlify.app Safe? Warning Signs, Score 25/100" trust_score: 25 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/crypto-zpt.netlify.app assessed: 2026-10-20 --- # Is crypto-zpt.netlify.app safe? TrustSniffer's low-trust assessment: 25/100 ## Verdict **Verdict: Low Trust, trust score 25/100.** crypto-zpt.netlify.app is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-20 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | Default Netlify 'Site not found' 404 error page. The page shows no product, login, or commercial content, and the requested site appears to be unpublished or nonexistent. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 1 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 1% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear | | Domain age | 11 days old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (1 snapshot) | Clear | | Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted | ## The page as captured ![Screenshot of the crypto-zpt.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/crypto-zpt.netlify.app/screenshots/first.png) _What crypto-zpt.netlify.app served when TrustSniffer captured it on 2026-10-20. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Overview This website is a subdomain on Netlify's free hosting platform. Its hostname suggests a crypto-themed project. When visited, it serves only the platform's default "Site not found" error page, which says the link is broken or the address does not exist. The page shows no products, pricing, company description, contact details or payment flow. Its apparent purpose therefore cannot be determined from what is publicly presented, and it currently looks like an unpublished or abandoned project placeholder. ### Scam/Impersonation Risk Contradictory signals are present, and the posture is clearly cautionary. A third-party threat-intelligence listing currently flags this hostname: one detection engine rates it malicious and another suspicious, and the listing is a confirmed **blacklist** hit. The behavioural sandbox also recorded concerning activity across all three test runs. Hidden forms were detected on every run, and password-type input fields were present even though the visible page is only an error notice. After interaction the page's structure changed very heavily, with thousands of DOM mutations, which is far more than a static 404 page should produce. Almost all network traffic went to external destinations. None of it went to non-whitelisted endpoints, which limits but does not remove the concern. The mismatch between a blank-looking page and concealed credential-capable forms is the most material behavioural anomaly. The hostname also closely resembles the hosting platform's own domain, and the page is visually the platform's default notice. This gives a visitor little way to tell a genuine placeholder from a staged shell that content could be swapped into later. No conflicting legal identities were found, because the page names no entity at all. The blacklist hit and the hidden-form behaviour alone justify elevated caution. Evidence: - The homepage serves only the default hosting-provider 404 notice, with a platform-issued internal reference ID and a "Start building" prompt, and no operator content. - Hidden forms were detected in 3 of 3 sandbox runs, with password-type fields present and a maximum DOM diff of 4,130 mutations after interaction. - Network telemetry recorded 36 external requests (15 external XHR/fetch calls and 21 external POSTs), with about 99.6% of peak traffic external and none to non-whitelisted destinations. - The domain is about 11 days old, with a single archive snapshot first and last seen on 2026-10-08. ### Regulatory Verification Notes The captured page contains no legal, terms, privacy, about or contact pages, and it names no company, registration number or licence. The site's real-world operator therefore cannot be tied to any entity from on-site evidence, and no regulated status is claimed or can be inferred. This is a disclosure gap rather than a finding of wrongdoing. The site's identity remains unverified. The transport encryption looks proper but says nothing about the operator. The certificate is organisation-validated, but the subject organisation is the hosting platform rather than the site's owner. Four abuse reports exist against a shared edge address serving this hostname. They are best read as a soft reputational signal from shared infrastructure, not as proof of this site's conduct. No broker-review database entry matches the site. Evidence: - The homepage lists no operator name, licence, registration number or support channel. - The TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, and valid to 2027-03-19. - The site is served from AS16509 (AMAZON-02, Amazon.com, Inc., US). - Four abuse reports, last logged about 26 days before analysis, attach to a shared CDN-range address that is not specific to this site. ### What to Verify Next Anyone expecting a legitimate service at this address should first obtain the official web address from an independent channel, such as the claimed brand's verified social profiles, a printed document or a direct call, and compare it character by character with this hostname. If a regulated financial or investment offering is claimed, the named entity's authorisation should be checked directly on the relevant regulator's public register, not through any link supplied by this site. The listing status should be re-checked later, since a flagged hostname that is cleaned or taken down changes the picture. Until then, official support and contact channels should be confirmed through an offline route. Evidence: - The homepage gives no content that would let a visitor confirm which brand or project the hostname is meant to represent. - The hostname's crypto-style naming is not backed by any crypto-related content, token or wallet function on the captured page. - The "Site not found" page indicates that no published deployment currently exists at the requested path. ### Summary Verdict The assessment is **low trust with elevated risk**. A confirmed external threat listing and concealed form behaviour outweigh the technically sound hosting and certificate hygiene. Apparent legitimacy cannot be established, since the operator is unidentified and the domain is very new. ### Infrastructure Integrity The site is delivered through Amazon's CDN/WAF layer. All four observed addresses are edge servers in Amazon's network, and the origin server was not observable. This protective hosting is a mitigating factor only. It reflects the hosting platform's quality and gives no assurance about the site's operator. Because only edge servers are visible, the underlying content could be replaced quickly without any change at the network level. ### Closing Assessment At most, the address should be viewed passively. No login credentials, passwords, wallet connections, personal data or payments should be entered, and nothing should be downloaded from it, until the operator is independently identified and the third-party listing is cleared. _Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, history in the web archive, page content. ### 01 External reputation - A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`) ### 02 Behaviour in a sandbox - The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`) ### 03 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 04 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 05 Page content - The page appears to present itself as a known brand it is not verified to belong to. (Page content `rule:PAGE_BRAND_SUSPECTED`) ### Signals weighed against the site - AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of crypto-zpt.netlify.app. - The request stayed on crypto-zpt.netlify.app. It was not redirected to another domain. (Clear) - The earliest public archive of this site is from 2026-10-08. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 2a05:d014:58f:6200::258 | | Name servers | Not available | | CDN / edge network | Detected (aws) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | | SSL expiry | 2027-03-19 | | Domain age | 0.03 years (continuous registration) | | Domain expiry | Not available | | Archive first seen | 2026-10-08 | | Archive snapshots | 1 | | Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 1% confidence, 4 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about crypto-zpt.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [crypto-ens.netlify.app](https://trustsniffer.com/report/crypto-ens.netlify.app), a similar name (Low Trust, 25/100) - [crypto-yjb.netlify.app](https://trustsniffer.com/report/crypto-yjb.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-raf.netlify.app](https://trustsniffer.com/report/portal-moonshot-raf.netlify.app), a similar name (Low Trust, 25/100) - [crypto-41u.netlify.app](https://trustsniffer.com/report/crypto-41u.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-mzv.netlify.app](https://trustsniffer.com/report/portal-moonshot-mzv.netlify.app), a similar name (Low Trust, 25/100) - [pump-voting-3v.netlify.app](https://trustsniffer.com/report/pump-voting-3v.netlify.app), a similar name (Low Trust, 25/100) - [crypto-qgk.netlify.app](https://trustsniffer.com/report/crypto-qgk.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-3xa.netlify.app](https://trustsniffer.com/report/portal-moonshot-3xa.netlify.app), a similar name (Low Trust, 25/100) - [basundhara.org.in](https://trustsniffer.com/report/basundhara.org.in), another site assessed as low-trust (Low Trust, 40/100) - [bilecki-kamen.com](https://trustsniffer.com/report/bilecki-kamen.com), another site assessed as low-trust (Low Trust, 40/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) - [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses) - [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23) --- *Source: [TrustSniffer](https://trustsniffer.com/report/crypto-zpt.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/crypto-zpt.netlify.app · assessed 2026-10-20.*