--- title: "Is moonshot-coins.com a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "moonshot-coins.com" verdict: "Critical Risk" title: "Is moonshot-coins.com a Scam? Risk Report, Score 0/100" trust_score: 0 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/moonshot-coins.com assessed: 2026-10-27 --- # Is moonshot-coins.com a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** moonshot-coins.com shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-27 by automated analysis. Classification confidence 75%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 5 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 3 months old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (1 snapshot) | Clear | | Certificate | Encrypted connection (Issued by WE1) | Noted | ## The page as captured ![Screenshot of the moonshot-coins.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/moonshot-coins.com/screenshots/first.png) _What moonshot-coins.com served when TrustSniffer captured it on 2026-10-27. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Overview This is a recently registered website operating under the name "moonshot-coins", a name that suggests a cryptocurrency or token-themed offering. When visited, it presents a security interstitial titled as a suspected phishing site instead of ordinary commercial content, and almost no readable page text was captured. Its apparent purpose cannot be established from the page itself. Its reputation and behavioural profile place it among higher-risk online properties. ### Scam/Impersonation Risk Contradictory signals are present, and they converge. Several independent threat-intelligence engines currently classify the domain as malicious, and one more rates it suspicious. The domain is also confirmed as blacklisted by external reputation sources. This is decisive and is not offset by the site's technical hygiene. The homepage returned a security interstitial flagging suspected phishing, which is consistent with the reputation findings. No conflicting legal entities and no specific brand impersonation were identified, so the risk rests on the blacklist and phishing-association signals, not on an identity contradiction. Behavioural testing found no wallet-drainer activity, clipboard manipulation, hidden forms or external password forms. It did show a very high share of external network traffic, heavy cross-origin requests and posts, and a high volume of browser console errors across all test runs. These are consistent with a thinly built or hastily assembled front end. The domain's very short history and minimal archive footprint remove any track record that might otherwise offset the threat detections. Evidence: - Homepage: capture returned a security challenge page titled as suspected phishing, with only a few hundred characters of text. - Reputation checks: five engines flagged the domain as malicious and one as suspicious, and an external blacklist hit was confirmed. - Domain provenance: registered 2026-07-15 (~0.28 years old), with 1 archive snapshot, first and last seen 2026-07-24 (1 year tracked). - Behavioural sandbox: 25 external XHR/fetch calls and 9 external POSTs, up to 95.8% external traffic share, and 20 console errors across 3 successful runs. ### Regulatory Verification Notes The homepage was blocked behind a challenge page, so no legal, terms, about or licensing content could be reviewed. The operator therefore cannot be tied to any identifiable legal entity, registered business or financial licence. The ownership details behind the domain are opaque. This is an ownership-opacity condition, not an identity contradiction. Because the site is token-themed, the absence of any regulatory standing is relevant in itself. No third-party broker-review dataset matched this name, which is neutral context and neither a clearance nor a warning. The blacklist and phishing findings carry the cautionary weight in this assessment. The missing regulatory information adds no separate accusation. Evidence: - Homepage: no company name, licence number or registration reference was available in the captured content. - Registration: the domain was registered through Dominet (HK) Limited and runs to 2027-07-15. - Transport security: the site presents a domain-validated TLS certificate issued by WE1, valid to 2026-12-11 (45 days remaining). This confirms encryption but not operator identity. - Hosting: served from AS13335 (Cloudflare, Inc., US). ### What to Verify Next Anyone who has already interacted with the domain should treat that interaction as potentially compromised. Any wallet connection, signed transaction, password, seed phrase or payment made through the site should be reviewed immediately. Wallet approvals should be revoked through a trusted tool, and passwords reused elsewhere should be changed. A claimed regulatory status should be checked only through the regulator's own public register, found independently and not through links on the site. Any claim that this site belongs to an established crypto brand should be tested by reaching that brand through its officially published channels, using contact routes obtained offline. Official support channels should be confirmed the same way before any dealings. The domain's standing should be rechecked against current threat-intelligence listings, since a changed status would materially alter this assessment. Evidence: - Registration: the domain is roughly three months old, so no established operating history exists to rely on. - Reputation: multiple engines currently flag it, so any change of listing status should be confirmed directly. - Identity: no verified link to a real-world brand, person or regulated entity was established. ### Summary Verdict The available evidence supports a high-risk assessment. Confirmed threat listings, a phishing association and a very young, thinly documented domain outweigh its technically sound baseline. Legitimacy is not supported, and the operator's real-world identity remains unestablished. The site is unsuitable for any sensitive or financial interaction. ### Infrastructure Integrity The site sits behind a major CDN and WAF provider with a valid, publicly trusted certificate. These are mitigating factors only. All observed addresses are shared edge servers, and the origin host was not observable, so the real hosting location cannot be independently checked. Protective infrastructure offers no assurance about the operator's intent. Content can also be changed behind the edge layer without visible change at the network level. Bot-challenge gating was active during testing, and the infrastructure cannot offset the reputation findings above. ### Closing Assessment The site should not be used for login, credential entry, wallet connection or any transfer of funds, and nothing should be downloaded from it. Casual read-only viewing carries the least exposure, but even that is best avoided until independent threat-intelligence sources clear the domain. _Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, history in the web archive, behaviour in a sandbox, hosting and network, registration and ownership. ### 01 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 02 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 03 Behaviour in a sandbox - Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`) - The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`) ### 04 Hosting and network - The domain was registered between three and six months ago. (Hosting and network `rule:DNS_YOUNG_6M`) ### 05 Registration and ownership - The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`) ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 30% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of moonshot-coins.com. - The request stayed on moonshot-coins.com. It was not redirected to another domain. (Clear) - Registration is published under Dominet (HK) Limited. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-07-15. (Noted) - The earliest public archive of this site is from 2026-07-24. (Clear) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Dominet (HK) Limited | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3035::ac43:b972 | | Name servers | CHUCK.NS.CLOUDFLARE.COM, VENUS.NS.CLOUDFLARE.COM | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | WE1 | | SSL expiry | 2026-12-11 | | Domain age | 0.28 years (continuous registration) | | Domain expiry | 2027-07-15 | | Archive first seen | 2026-07-24 | | Archive snapshots | 1 | | Reputation | VirusTotal: 5 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about moonshot-coins.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [safeifm.com](https://trustsniffer.com/report/safeifm.com), another .com site assessed as critical-risk (Critical Risk, 5/100) - [alphapicaficagency.com](https://trustsniffer.com/report/alphapicaficagency.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [amaamn.com](https://trustsniffer.com/report/amaamn.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [jenniferloeffler.com](https://trustsniffer.com/report/jenniferloeffler.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [hdbkell.com](https://trustsniffer.com/report/hdbkell.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [kenwillzltd.com](https://trustsniffer.com/report/kenwillzltd.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [epsinf.com](https://trustsniffer.com/report/epsinf.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [dufourbit.com](https://trustsniffer.com/report/dufourbit.com), another .com site assessed as critical-risk (Critical Risk, 3/100) - [qualification-hoodrat.com](https://trustsniffer.com/report/qualification-hoodrat.com), another .com site assessed as critical-risk (Critical Risk, 0/100) - [noxa.finance](https://trustsniffer.com/report/noxa.finance), another site assessed as critical-risk (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) - [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses) --- *Source: [TrustSniffer](https://trustsniffer.com/report/moonshot-coins.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/moonshot-coins.com · assessed 2026-10-27.*