Is portal-moonshot-410.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a hosting-platform placeholder, not a functioning business site. The homepage of a subdomain on a public site-hosting service shows only a generic "Site not found" error page. The page says the visitor followed a broken link or entered a URL that does not exist on the platform. It offers no products, services, branding, pricing or contact details, and the hosting provider's invitation to "Start building" is its only call to action. No business model is visible, and the site's apparent purpose cannot be established from its content.

Scam/Impersonation Risk

This site carries an elevated risk profile, driven by contradictory signals that do not match its inert appearance. Multiple independent security engines currently flag the domain as malicious, including one top-tier vendor, and the domain is blacklisted on that basis. A site that only displays a hosting error would not normally attract such detections. In addition, automated browsing sessions found concealed forms, including a password-entry form, in every run, and the page structure changed heavily after interaction. A page that visibly contains no form should not behave this way, and the mismatch suggests content or functionality that is not shown to a casual visitor. The domain label also closely resembles the hosting platform's own domain, which raised an unconfirmed brand-lookalike concern; no impersonation of a specific company was confirmed. Four abuse reports exist against a network address used by the site, but that address is a shared edge address of a large cloud provider. These reports are therefore a soft signal that cannot be attributed to this site alone. No conflicting legal identities were observed, because the site publishes no identity content to compare. Evidence:

• Homepage: shows only the platform's generic 404 message and no offer, yet three of three sandbox sessions detected hidden forms with a password field present.
• Homepage behavior: about 4,130 page-structure mutations recorded after interaction, which is anomalous for a static error page.
• Reputation: 7 malicious and 1 suspicious detections from external security engines, with a threat-intelligence listing confirmed.
• Provenance: first observed 2026-10-02 with 1 archive snapshot (about 17 days old); abuse reports (4) tied to a shared Amazon edge address.

Regulatory Verification Notes

The site discloses no operator name, legal entity, registration number, licence, jurisdiction, terms or privacy policy, and no contact channel. Because the page is a hosting error, there is no regulated activity to assess and no licensing claim to test. The absence of identity disclosure is a transparency gap, not proof of wrongdoing in itself. The operator's real-world identity remains independently unverified, and nothing on the site can be used to connect it to a known brand or person. No third-party broker or regulator-style reputational record was matched to this site. The only confirmed adverse reputational evidence is the security-engine detections described above. Evidence:

• Homepage: no legal entity, licence, address, policy page or contact details.
• Transport security: OV-level TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, valid to 2027-03-19, with the subject organisation Netlify, Inc. This identifies the hosting platform, not the site operator.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).

What to Verify Next

Any contact with this domain should be preceded by establishing who operates it and what it is meant to be. Whoever supplied the link should confirm through an independent, offline channel that it is intended and that the content is live and authentic. Official contact channels should be confirmed from a known, separately sourced website. If the link claims to be a portal belonging to a particular organisation, that organisation should confirm the address through its official support route. The host platform's abuse channel is the proper route for reporting suspected misuse of the subdomain. Evidence:

• Homepage: the platform's own 404 text is the only content, so no operator or intended service can be cross-checked on-site.
• Domain label: describes a "portal" but resolves to an undeployed site, a mismatch that only the link's sender or the claimed organisation can resolve.
• Reputation checks: current external detections should be re-reviewed after any claimed clean-up.

Summary Verdict

The overall posture is clearly cautionary and security-forward. The site is unverified, very recently observed, and the confirmed blacklisting and hidden-form behavior outweigh the neutral appearance of its visible content. Standard transport encryption and mainstream hosting do not offset these adverse signals. The site is unsuitable for any sensitive interaction.

Infrastructure Integrity

The site is delivered from Amazon Web Services infrastructure under a valid certificate for the hosting platform. All four observed addresses are CDN edge servers, and no origin server was identifiable. This is a mitigating factor only. It shows reputable hosting, not a legitimate operator, and edge-only visibility prevents independent confirmation of what actually serves the content. That visibility limit also means the content could be swapped quickly without a change in infrastructure.

Closing Assessment

Treat the domain as read-only at most. Do not log in, enter credentials or make any payment or financial transaction, and do not download anything from it.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.