Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
portal-moonshot-7hc.netlify.app shows high-risk / scam indicators.
| What this site appears to be | The page is a Netlify 'Site not found' 404 error page, indicating that the requested site or path is not deployed. It contains no service, offer, forms, or links. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 5 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 2 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This is a bare hosting-platform error page, not a business website. It sits on a Netlify-provided subdomain with a portal-style name and shows only a generic "Site not found" message, which says the requested site or path is not deployed. It offers no products, services, pricing, company description, or navigation. The page has no apparent purpose or monetization model beyond reporting the missing deployment, and it shows no operator or brand.
Scam/Impersonation Risk
The assessment is cautionary. Contradictory signals are present. Several independent security engines currently classify the address as malicious, and one major security vendor is among them. That makes this a confirmed blacklist hit rather than a soft reputational signal. This outweighs the benign appearance of the 404 page. A page that displays nothing yet draws multiple malicious classifications is consistent with a placeholder, a taken-down deployment, or a lookalike staging page that can later be swapped for different content. The sandbox also recorded concealed forms, including password-type fields, on a page that visibly presents none. The page changed heavily after interaction. A harmless error page would not normally behave this way, so it suggests content that is not visible to a casual visitor. The page's naming and presentation closely resemble the hosting platform's own error template, which fits a lookalike but is not a confirmed impersonation. Two abuse reports exist against a network address in the surrounding infrastructure. They concern a provider-shared address and are not attributable to this site, so they are discounted. No conflicting legal identities and no confirmed phishing or brand-impersonation finding were observed.
- Homepage: shows only a generic "Site not found" message with no service, offer, links, or visible forms.
- Reputation checks: multiple security engines flag the address as malicious, including one major vendor, and an external blacklist is active.
- Sandbox behavior: hidden forms with password-type fields were detected in every run, and the page changed heavily after interaction despite showing no visible content.
- Network reputation: the two abuse reports relate to a shared provider address and are discounted as not attributable to this site.
Regulatory Verification Notes
The site shows no legal, identity, licensing, or contact pages. It names no company, operator, registration number, or regulator, and no real-world owner can be linked to it. The page is only a hosting error, so these absences are expected content gaps. They are not evidence of wrongdoing, and the confirmed adverse reputation above is what drives the risk posture. No third-party broker or regulatory record matches this address, and none is treated as a verdict either way. The valid transport-encryption certificate belongs to the hosting platform. It shows the connection is encrypted but says nothing about who operates this particular deployment.
- Site content: no legal-entity name, license, registration, or terms and privacy pages exist.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Transport encryption: an OV certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19.
- Third-party broker data: no matching broker or regulatory record was found.
What to Verify Next
Any contact with this address should be preceded by establishing who is meant to be behind it. If the address came from an email, message, or advertisement, the sender should be asked to confirm the destination through an independent, offline, or previously known official channel. Where a specific organization is claimed, its real website should be reached from the organization's own published materials. Security teams should re-check the address's classification after a few days, since a placeholder or lookalike page can change content without notice. Any other site or message that links to this address should be treated with matching caution until the origin is explained.
- Homepage: gives no operator or organization to check against any registry, so the origin of the link is the only available lead.
- Reputation checks: the active malicious classifications indicate the address should be re-checked for status changes.
- Sandbox behavior: the concealed forms mean any later content change could expose credential collection.
Summary Verdict
The address is assessed as high-risk. A confirmed blacklist classification and unexplained concealed-form behavior outweigh the otherwise benign appearance of the page. Its operator cannot be linked to any real-world identity. Technical hygiene does not offset the reputational findings, and the posture is clearly cautionary.
Infrastructure Integrity
The site is delivered through Amazon's content-delivery edge network, and all observed addresses are edge nodes. The origin server was not observable, so the hosting cannot be independently verified, and content could be swapped behind the edge without any visible change. The hosting is from a mainstream, trusted provider and the certificate is valid. That is a mitigating factor only. It does not offset the external threat detections or the behavioral anomalies.
Closing Assessment
The address should be kept to passive viewing at most. No login details, passwords, wallet connections, or payments should be submitted, and nothing should be downloaded from it. Links leading here should be treated as untrusted until a legitimate source is independently confirmed.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, page content.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION
03 Page content
- The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
Signals weighed against the site
- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of portal-moonshot-7hc.netlify.app.
- The request stayed on portal-moonshot-7hc.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 5 flagged | AbuseIPDB: 0% confidence, 2 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about portal-moonshot-7hc.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.