Is portal-moonshot-avq.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a subdomain hosted on the Netlify platform. At the time of analysis it showed only the platform's generic "Site not found" 404 error page, which says the link is broken or the address does not exist on Netlify. The page has no product, offer, pricing, branding, navigation or stated purpose. No business model can be observed. What the site presents is an unclaimed or non-resolving hosted address.

Scam/Impersonation Risk

Contradictory signals are present and elevated. The site is blacklisted by external reputation sources. Several independent security engines flag the address as malicious, including one major, widely trusted security vendor. That convergence is the decisive concern in this assessment. The visible page is a bare error screen, but the behavioural sandbox found hidden forms, including password-type fields, on all three runs. The page also showed heavy structural change after interaction. A page that shows no forms to a visitor but carries concealed credential-capable forms is consistent with a staged or swapped-in lure behind a placeholder. Page analysis also flagged a brand-resemblance suspicion tied to the hosting platform's own domain name. This is a suspicion only, not a confirmed impersonation. No conflicting legal identities were found, because the page names no entity at all. The address is very recently created, so there is no track record to offset the detections. Four reports have been logged against one of the site's serving IP addresses. They attach to shared provider infrastructure and are not attributed to this specific site, so they are context rather than corroboration. Evidence:

• Homepage: the only content is a platform 404 notice, with no visible forms, login, or offer.
• Behavioural sandbox: hidden forms were detected in 3 of 3 runs, with 3 password-type forms recorded and DOM mutations peaking at 4,130 after interaction.
• External reputation: 4 engines rated the address malicious, including a major tier-one vendor.
• Domain provenance: first observed 2026-10-06, about 13 days old, with a single archive snapshot in 2026 and no multi-year history.

Regulatory Verification Notes

The page has no legal, identity or licensing content: no company name, registration number, regulator reference, terms, privacy policy or contact channel. Nothing links the address to a real-world operator, so identity remains unverified. The transport-layer certificate does not change this. It is issued to the hosting platform, not to whoever controls this subdomain, so it confirms encrypted transport but says nothing about operator legitimacy. No third-party broker or regulatory-database match was found. Because the site makes no financial or licensed-activity claims, the licensing question does not arise. The concern here is unattributable ownership combined with the external detections. Evidence:

• Homepage: no legal entity, licence, policy or contact information is published.
• Hosting: served from AS16509 (AMAZON-02 – Amazon.com, Inc., US), registry ARIN, country US.
• Transport encryption: OV certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19.
• Broker and regulatory matching: no third-party broker record was matched.

What to Verify Next

Verification should start with the party that supposedly directed users to this address. Confirm through an independent, offline channel that the organisation actually issued the link, and ask it for its official, directly typed web address. Anyone who received the link in an email, message or advertisement should treat that message as suspect and report it. Anyone who may have entered credentials on a page at this address should change them promptly and enable multi-factor authentication. The hosting platform's abuse process can be used to report the address, since a platform operator can confirm whether the site is claimed and what it serves. Re-check the address's reputation after the platform or owner has taken action, because the contents behind a placeholder can change without notice. Evidence:

• Homepage: the platform notice shows the address is currently unclaimed or non-resolving, so no stable legitimate service is present to authenticate.
• Sandbox: concealed credential-capable forms mean that any later content at this address cannot be assumed safe.
• Provenance: no operator identity exists on the page, so verification must go through the referring party.

Summary Verdict

The overall posture is high-risk. Confirmed external detections outweigh the neutral appearance of the visible page. The site is not established, its operator is not identifiable, and its observed behaviour is inconsistent with its blank presentation. Legitimacy cannot be supported on the present evidence.

Infrastructure Integrity

The site is served through Amazon-operated edge infrastructure, via the Netlify platform. All four observed IP addresses are edge nodes, and no origin server could be observed. This is mainstream, protective infrastructure and a mitigating factor, but it does not offset the external detections, and it cannot independently confirm what is hosted behind the edge. The abuse reports logged against one of these edge addresses reflect shared provider infrastructure and are not attributable to this site alone. Shared hosting of this kind makes it easy to swap content quickly behind the same address.

Closing Assessment

The address should be used, at most, for read-only viewing, and only if there is a compelling reason to open it. No credentials, personal data or payments should be entered, and no files should be downloaded or run from it. Any link that led here should be handled as potentially malicious until the detections are cleared and the operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.