--- title: "Is portal-moonshot-3an.netlify.app a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "portal-moonshot-3an.netlify.app" verdict: "Critical Risk" title: "Is portal-moonshot-3an.netlify.app a Scam? Score 0/100" trust_score: 0 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/portal-moonshot-3an.netlify.app assessed: 2026-10-19 --- # Is portal-moonshot-3an.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** portal-moonshot-3an.netlify.app shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-19 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | The page is the Netlify hosting 'Site not found' 404 response, indicating the requested site or path does not exist. It contains no service offering, forms, financial claims, or sensitive data requests. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 3 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 2 reports; shared hosting inflates reports) | Clear | | Domain age | 15 days old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (1 snapshot) | Clear | | Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted | ## The page as captured ![Screenshot of the portal-moonshot-3an.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/portal-moonshot-3an.netlify.app/screenshots/first.png) _What portal-moonshot-3an.netlify.app served when TrustSniffer captured it on 2026-10-19. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. The website is a subdomain on the Netlify hosting platform. When visited, it returns only the platform's default "Site not found" 404 page. The page tells the visitor that the link is broken or that no site exists at that address, and it points to Netlify's troubleshooting guide and an invitation to build a site for free. It shows no products, services, pricing, branding or operator information, so its commercial purpose and business model cannot be determined from what it publishes. ### Scam/Impersonation Risk **Contradictory signals are present and material.** The address has been **blacklisted** by external security intelligence: several independent detection engines, including a tier-one security vendor, classify it as malicious or suspicious. That convergence is the decisive adverse finding. Two abuse reports were also logged against an address in the hosting provider's shared pool. These were discounted because they attach to shared infrastructure and not to this site specifically. They do not add to the case, but they do not weaken the blacklist finding either. The domain is extremely new and has almost no independent history, which fits throwaway or staging-style use of a free-hosting subdomain. In repeated sandbox runs the visible page also behaved very differently from its content. The static page shows no forms, yet every run detected hidden forms, including password-bearing fields, along with a very large burst of page changes after interaction and heavy outbound request activity. No phishing, brand impersonation or conflicting legal identities were confirmed. The hosting-platform name appears in the address only because the site is a subdomain of that platform. The hidden credential-capable forms behind an empty-looking page remain a serious concern. Evidence: - Homepage: it serves only the hosting platform's default 404 page, with 368 characters of visible text and no declared forms, offers or claims. - Sandbox behavior across three of three runs: hidden forms detected, three password-form elements present, and 4,132 page mutations after interaction. - Domain provenance: first observed 2026-10-04 (~14 days old), with 1 archive snapshot in 2026 and 1 year tracked. - External reputation: multiple malicious and suspicious detections, with a tier-one vendor among them, produced a confirmed blacklist. ### Regulatory Verification Notes The site publishes no legal, identity or licensing information. It has no terms page, about page, company name, registration number or regulator reference, so its operator cannot be identified from the site itself. This is a verification gap and not evidence of wrongdoing in itself, because the visible page is only a hosting error response. No financial service is offered, and no third-party broker or regulatory record was matched, so there is nothing to confirm or contradict. The valid encryption certificate belongs to the hosting platform, not to the site's operator. It shows that the connection is encrypted and says nothing about who runs the site or whether the site is legitimate. Evidence: - Homepage: no company name, licence, registration number or contact channel is published. - Hosting: the site is served from AS16509 (AMAZON-02, Amazon.com, Inc., US). - Transport encryption: the TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc., and valid to 2027-03-19 (151 days remaining). - Broker reputation: no matching third-party broker record exists, so no reputational context is available either way. ### What to Verify Next The first step is to establish through an independent, offline route why this address was supplied, for example by phoning the person or organisation that sent the link on a number taken from a trusted source. Anyone claiming to represent a known brand should be asked for its official domain, and that domain should be reached by typing it directly. Any later claim of licensing or corporate registration on this address should be checked in the relevant regulator's own registry and not through links on the site. Because the address is newly created and its behaviour was anomalous, it should be re-assessed after some time. If it is later populated with real content, a fresh review is needed before any trust is extended. Evidence: - Homepage: it carries no operator or contact details, so no channel exists on the site to verify against. - Sandbox runs: hidden credential-capable forms were seen, so any login prompt later appearing here must be treated as unverified. - Archive history: only a single snapshot exists, so there is no prior content to compare against future changes. ### Summary Verdict The site carries an elevated, clearly adverse risk posture. Confirmed external blacklisting and concealed credential-capable behaviour outweigh its limited positive technical hygiene. Its operator is unidentified and its history is minimal, so there is no evidence on which to base trust. ### Infrastructure Integrity The site sits behind Amazon-operated edge infrastructure with a protective CDN/WAF layer. All four observed addresses are edge nodes and no origin server was observable, so hosting cannot be independently verified, and the edge-only view can mask rapid content swaps. The infrastructure is reputable and is a mitigating factor for transport and availability, but it cannot offset the external reputation findings. ### Closing Assessment This address should not be used for login, credential entry, payments or any financial interaction. Any prompt on it asking for a password, wallet connection or personal data should be declined. If the link arrived unsolicited, it should be treated as untrusted and reported to the hosting platform's abuse channel. _Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, history in the web archive, page content. ### 01 External reputation - Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`) ### 02 Behaviour in a sandbox - The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`) ### 03 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 04 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 05 Page content - The page appears to present itself as a known brand it is not verified to belong to. (Page content `rule:PAGE_BRAND_SUSPECTED`) ### Signals weighed against the site - AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of portal-moonshot-3an.netlify.app. - The request stayed on portal-moonshot-3an.netlify.app. It was not redirected to another domain. (Clear) - The earliest public archive of this site is from 2026-10-04. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 2a05:d014:58f:6200::259 | | Name servers | Not available | | CDN / edge network | Detected (aws) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | | SSL expiry | 2027-03-19 | | Domain age | 0.04 years (continuous registration) | | Domain expiry | Not available | | Archive first seen | 2026-10-04 | | Archive snapshots | 1 | | Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 0% confidence, 2 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about portal-moonshot-3an.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [portal-moonshot-b0g.netlify.app](https://trustsniffer.com/report/portal-moonshot-b0g.netlify.app), a similar name (Critical Risk, 4/100) - [portal-moonshot-p35.netlify.app](https://trustsniffer.com/report/portal-moonshot-p35.netlify.app), a similar name (Critical Risk, 0/100) - [portal-moonshot-jsx.netlify.app](https://trustsniffer.com/report/portal-moonshot-jsx.netlify.app), a similar name (Critical Risk, 0/100) - [portal-moonshot-yhr.netlify.app](https://trustsniffer.com/report/portal-moonshot-yhr.netlify.app), a similar name (Critical Risk, 0/100) - [portal-moonshot-amv.netlify.app](https://trustsniffer.com/report/portal-moonshot-amv.netlify.app), a similar name (Critical Risk, 0/100) - [crypto-ce9.netlify.app](https://trustsniffer.com/report/crypto-ce9.netlify.app), a similar name (Critical Risk, 0/100) - [portal-moonshot-8kj.netlify.app](https://trustsniffer.com/report/portal-moonshot-8kj.netlify.app), a similar name (Critical Risk, 0/100) - [crypto-os5.netlify.app](https://trustsniffer.com/report/crypto-os5.netlify.app), a similar name (Critical Risk, 0/100) - [qweb3ledger.com](https://trustsniffer.com/report/qweb3ledger.com), another site assessed as critical-risk (Critical Risk, 0/100) - [xautstaking.com](https://trustsniffer.com/report/xautstaking.com), another site assessed as critical-risk (Critical Risk, 15/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance) - [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens) - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) --- *Source: [TrustSniffer](https://trustsniffer.com/report/portal-moonshot-3an.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/portal-moonshot-3an.netlify.app · assessed 2026-10-19.*