--- title: "Is portal-moonshot-avq.netlify.app Safe? Risk Report, Score 25/100" source: TrustSniffer type: Website trust & fraud report subject: "portal-moonshot-avq.netlify.app" verdict: "Low Trust" title: "Is portal-moonshot-avq.netlify.app Safe? Score 25/100" trust_score: 25 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/portal-moonshot-avq.netlify.app assessed: 2026-10-20 --- # Is portal-moonshot-avq.netlify.app safe? TrustSniffer's low-trust assessment: 25/100 ## Verdict **Verdict: Low Trust, trust score 25/100.** portal-moonshot-avq.netlify.app is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-20 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | Netlify 'Site not found' 404 error page. No site content, offer, login, or forms are present, so the underlying site cannot be assessed. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 4 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 1% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear | | Domain age | 15 days old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (1 snapshot) | Clear | | Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted | ## The page as captured ![Screenshot of the portal-moonshot-avq.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/portal-moonshot-avq.netlify.app/screenshots/first.png) _What portal-moonshot-avq.netlify.app served when TrustSniffer captured it on 2026-10-20. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. This is a subdomain hosted on the Netlify platform. At the time of analysis it showed only the platform's generic "Site not found" 404 error page, which says the link is broken or the address does not exist on Netlify. The page has no product, offer, pricing, branding, navigation or stated purpose. No business model can be observed. What the site presents is an unclaimed or non-resolving hosted address. ### Scam/Impersonation Risk Contradictory signals are present and elevated. The site is **blacklisted** by external reputation sources. Several independent security engines flag the address as malicious, including one major, widely trusted security vendor. That convergence is the decisive concern in this assessment. The visible page is a bare error screen, but the behavioural sandbox found hidden forms, including password-type fields, on all three runs. The page also showed heavy structural change after interaction. A page that shows no forms to a visitor but carries concealed credential-capable forms is consistent with a staged or swapped-in lure behind a placeholder. Page analysis also flagged a brand-resemblance suspicion tied to the hosting platform's own domain name. This is a suspicion only, not a confirmed impersonation. No conflicting legal identities were found, because the page names no entity at all. The address is very recently created, so there is no track record to offset the detections. Four reports have been logged against one of the site's serving IP addresses. They attach to shared provider infrastructure and are not attributed to this specific site, so they are context rather than corroboration. Evidence: - Homepage: the only content is a platform 404 notice, with no visible forms, login, or offer. - Behavioural sandbox: hidden forms were detected in 3 of 3 runs, with 3 password-type forms recorded and DOM mutations peaking at 4,130 after interaction. - External reputation: 4 engines rated the address malicious, including a major tier-one vendor. - Domain provenance: first observed 2026-10-06, about 13 days old, with a single archive snapshot in 2026 and no multi-year history. ### Regulatory Verification Notes The page has no legal, identity or licensing content: no company name, registration number, regulator reference, terms, privacy policy or contact channel. Nothing links the address to a real-world operator, so identity remains unverified. The transport-layer certificate does not change this. It is issued to the hosting platform, not to whoever controls this subdomain, so it confirms encrypted transport but says nothing about operator legitimacy. No third-party broker or regulatory-database match was found. Because the site makes no financial or licensed-activity claims, the licensing question does not arise. The concern here is unattributable ownership combined with the external detections. Evidence: - Homepage: no legal entity, licence, policy or contact information is published. - Hosting: served from AS16509 (AMAZON-02 – Amazon.com, Inc., US), registry ARIN, country US. - Transport encryption: OV certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19. - Broker and regulatory matching: no third-party broker record was matched. ### What to Verify Next Verification should start with the party that supposedly directed users to this address. Confirm through an independent, offline channel that the organisation actually issued the link, and ask it for its official, directly typed web address. Anyone who received the link in an email, message or advertisement should treat that message as suspect and report it. Anyone who may have entered credentials on a page at this address should change them promptly and enable multi-factor authentication. The hosting platform's abuse process can be used to report the address, since a platform operator can confirm whether the site is claimed and what it serves. Re-check the address's reputation after the platform or owner has taken action, because the contents behind a placeholder can change without notice. Evidence: - Homepage: the platform notice shows the address is currently unclaimed or non-resolving, so no stable legitimate service is present to authenticate. - Sandbox: concealed credential-capable forms mean that any later content at this address cannot be assumed safe. - Provenance: no operator identity exists on the page, so verification must go through the referring party. ### Summary Verdict The overall posture is high-risk. Confirmed external detections outweigh the neutral appearance of the visible page. The site is not established, its operator is not identifiable, and its observed behaviour is inconsistent with its blank presentation. Legitimacy cannot be supported on the present evidence. ### Infrastructure Integrity The site is served through Amazon-operated edge infrastructure, via the Netlify platform. All four observed IP addresses are edge nodes, and no origin server could be observed. This is mainstream, protective infrastructure and a mitigating factor, but it does not offset the external detections, and it cannot independently confirm what is hosted behind the edge. The abuse reports logged against one of these edge addresses reflect shared provider infrastructure and are not attributable to this site alone. Shared hosting of this kind makes it easy to swap content quickly behind the same address. ### Closing Assessment The address should be used, at most, for read-only viewing, and only if there is a compelling reason to open it. No credentials, personal data or payments should be entered, and no files should be downloaded or run from it. Any link that led here should be handled as potentially malicious until the detections are cleared and the operator is independently identified. _Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, page content, history in the web archive. ### 01 External reputation - Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`) ### 02 Behaviour in a sandbox - The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`) ### 03 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 04 Page content - The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`) ### 05 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### Signals weighed against the site - AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of portal-moonshot-avq.netlify.app. - The request stayed on portal-moonshot-avq.netlify.app. It was not redirected to another domain. (Clear) - The earliest public archive of this site is from 2026-10-06. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 2a05:d014:58f:6200::258 | | Name servers | Not available | | CDN / edge network | Detected (aws) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | | SSL expiry | 2027-03-19 | | Domain age | 0.04 years (continuous registration) | | Domain expiry | Not available | | Archive first seen | 2026-10-06 | | Archive snapshots | 1 | | Reputation | VirusTotal: 4 flagged \| AbuseIPDB: 1% confidence, 4 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about portal-moonshot-avq.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [portal-moonshot-wo8.netlify.app](https://trustsniffer.com/report/portal-moonshot-wo8.netlify.app), a similar name (Low Trust, 25/100) - [crypto-jrt.netlify.app](https://trustsniffer.com/report/crypto-jrt.netlify.app), a similar name (Low Trust, 25/100) - [crypto-yfo.netlify.app](https://trustsniffer.com/report/crypto-yfo.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-xz3.netlify.app](https://trustsniffer.com/report/portal-moonshot-xz3.netlify.app), a similar name (Low Trust, 25/100) - [crypto-uux.netlify.app](https://trustsniffer.com/report/crypto-uux.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-6d4.netlify.app](https://trustsniffer.com/report/portal-moonshot-6d4.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-2cf.netlify.app](https://trustsniffer.com/report/portal-moonshot-2cf.netlify.app), a similar name (Low Trust, 25/100) - [crypto-rtv.netlify.app](https://trustsniffer.com/report/crypto-rtv.netlify.app), a similar name (Low Trust, 25/100) - [equipexitos.com](https://trustsniffer.com/report/equipexitos.com), another site assessed as low-trust (Low Trust, 40/100) - [relay.immo](https://trustsniffer.com/report/relay.immo), another site assessed as low-trust (Low Trust, 40/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites) - [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site) - [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26) --- *Source: [TrustSniffer](https://trustsniffer.com/report/portal-moonshot-avq.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/portal-moonshot-avq.netlify.app · assessed 2026-10-20.*