Is Pages a scam? TrustSniffer's high-risk assessment of moonshot-listing.pages.dev: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page landing site hosted on a free Cloudflare Pages subdomain. Its page title is "Vote to Earn — Powered by Moonshot". It presents a short, text-light page built around a reward-for-participation concept, apparently tied to a crypto-style "Moonshot" listing or promotion. The hostname's "listing" wording suggests it is meant to resemble a token-listing or voting campaign. Its apparent purpose is to draw visitors into an earn-by-voting scheme.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is clearly cautionary. Multiple independent security engines classify the domain as malicious, including several tier-one detection providers. The detections are numerous enough to trigger a protective override of the overall assessment, and the domain is blacklisted. The page's "vote to earn" framing matches a familiar pattern of engagement-for-reward lures, which attract users with promised earnings and then push them toward wallet, credential or payment steps. The page's own text is minimal, so the harm mechanism cannot be confirmed from the page alone. The page invokes a "Moonshot" name, but no independent evidence links the operator to any established real-world project. The disposable subdomain on a shared hosting platform means the address carries no brand ownership of its own. Behavioral testing was benign: the page made no external data requests, showed no wallet-connection or clipboard-manipulation behavior, and showed no cloaking. This does not offset the threat detections, because a lure page can stay passive until a later content change or a redirect. The page also logged a high volume of script errors during testing, which points to an unpolished or hastily assembled build. Evidence:

• Homepage: titled "Vote to Earn — Powered by Moonshot", with a short text body that promises a reward for participation and discloses no operator.
• Reputation checks: a substantial number of security engines flag the domain as malicious, and the blacklist condition is confirmed.
• Behavioral sandbox: three successful runs with stable HTTP 200 responses, zero external requests and no wallet or clipboard activity.
• Behavioral sandbox: a high number of console errors, which indicates an unfinished page.

Regulatory Verification Notes

No licensing, registration or regulator-linked status was found. The single page publishes no legal entity, jurisdiction or licence reference, so no regulatory standing can be inferred. For a site that invites financial-style participation (earning rewards for votes), the absence of any disclosure is material. The operator's real-world identity remains unverified, and the on-page disclosure position is unclear. No third-party broker or regulatory database lists the site. This confirms the absence of independent recognition but does not by itself indicate wrongdoing. The valid encryption certificate is only a transport-security measure. It confirms an encrypted connection, not the operator's integrity, because the certificate is domain-validated only. Evidence:

• Homepage: no company name, licence number, registered address or terms-of-service link is presented.
• Served from AS13335 (Cloudflare, Inc., US), with the registry shown as ARIN.
• TLS certificate issued by YE1 (domain-validated), valid to 2026-12-06 with 37 days remaining.
• Broker and regulatory reputation lookup: no matching entity found.

What to Verify Next

Any claimed connection to a "Moonshot" project should be checked only through that project's official channels, reached independently of this page, such as a known website or verified social account entered manually. Wallet-signing, deposit and claim requests tied to this page should be treated as unconfirmed until that connection is established. Official support and contact channels should be confirmed through the same independent route. Any regulator or licensing claim the page later makes must be checked directly against the relevant public register. If the site has already been visited, devices and any connected wallets should be reviewed for approvals or downloads made during the visit. Evidence:

• Homepage: the "Powered by Moonshot" attribution is unsupported by any link or credential on the page.
• Homepage: the earn-by-voting premise gives no stated mechanism, payout terms or operator.
• Reputation results: the host's malicious classification means any later content change should be treated as untrusted.

Summary Verdict

The available evidence places this website in a critical, elevated-risk posture. Confirmed adverse reputation from several independent security sources outweighs the passive behavior and valid certificate observed. The operator's identity is unverified, and the site cannot be treated as legitimate on current evidence.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge servers, so the origin host is not observable. That shield reduces direct exposure of the backend. It also prevents independent hosting verification and can mask rapid content swaps, which is a concern for a disposable subdomain. The protection is a mitigating factor only. It is shared, platform-level infrastructure and gives no evidence about the site's operator, and it cannot offset the threat detections.

Closing Assessment

Interaction beyond passive viewing should be avoided. Wallet connections, sign-ins, credential entry, payments and file downloads should all be withheld, and the address should not be shared or promoted. Anyone who received the link through a message or advertisement should treat it as suspect and report it to the sender's platform.