---
title: "Is portal-moonshot-gc5.netlify.app a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "portal-moonshot-gc5.netlify.app"
verdict: "Critical Risk"
title: "Is portal-moonshot-gc5.netlify.app a Scam? Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/portal-moonshot-gc5.netlify.app
assessed: 2026-10-20
---

# Is portal-moonshot-gc5.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** portal-moonshot-gc5.netlify.app shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-20 by automated analysis. Classification confidence 55%.

| Field | Value |
| --- | --- |
| What this site appears to be | The page is a Netlify 'Site not found' 404 error page. It has no site content, login or sign-up form, purchase flow, or financial offer, so no fraud or impersonation signals are present, but the site's purpose cannot be determined. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 3 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 2 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted |
| Hosted by | AMAZON-02 (Server in US) | Noted |

## The page as captured


![Screenshot of the portal-moonshot-gc5.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/portal-moonshot-gc5.netlify.app/screenshots/first.png)

_What portal-moonshot-gc5.netlify.app served when TrustSniffer captured it on 2026-10-20. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.

## Full analysis


### Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain on a shared application-hosting platform that currently serves only the platform's generic "Site not found" 404 notice. It offers no product, service, content, or branding of its own. The only call to action is the host's own invitation to "Build and deploy your own site for free". Nothing on the page shows a business model or purpose, and its name suggests a staging or customer-portal deployment that is no longer, or not yet, populated.


### Scam/Impersonation Risk

This site carries an elevated risk assessment, driven by external reputation and runtime behaviour rather than by anything written on the page. The domain is **blacklisted**: several independent threat-intelligence engines flag it as malicious or suspicious, including a tier-one security vendor. That is a confirmed contradiction with the benign appearance of a plain 404 page. The sandbox also observed behaviour that a static error page should not show. Hidden forms, including password-type fields, appeared in every observation run. The page changed heavily in structure after interaction, and almost all network activity went to external destinations. The final destination also differed from the requested one. A visible page with no forms, combined with concealed credential-capable elements, is a pattern consistent with a deployment that swaps content after the initial load. The domain name closely resembles the hosting provider's own brand domain. The visible text appears to be the provider's genuine error notice, so no impersonation of a specific brand is confirmed. Two abuse reports were recorded, but they attach to a shared edge address used by many tenants. They are discounted and are not attributed to this site. Evidence:

- Homepage: renders only a "Site not found" notice with an internal reference ID, and shows no visible forms, login, or purchase flow.
- Sandbox runs: hidden forms with password fields were detected in all three runs, and about 4,000 DOM mutations followed interaction on a page of roughly 370 characters of text.
- Threat intelligence: at least three engines rate the domain malicious and one more rates it suspicious, with a tier-one vendor among those flagging it.
- Network behaviour: external requests dominated traffic, and the final destination did not match the requested one.

### Regulatory Verification Notes

The page carries no legal entity name, licence or registration reference, terms, privacy policy, or contact channel. It is a hosting placeholder, so these are not omissions by a real operator, and the real-world operator cannot be identified from any on-site content. The site claims no regulated activity, so there is no licence to verify. The absence of disclosure therefore does not itself indicate wrongdoing. It does mean nothing on the site can offset the reputation findings above. The transport encryption is technically sound but says nothing about who controls the content. The certificate is organisation-validated, but it was issued to the hosting platform, not to any operator of this subdomain. No broker-reputation record matches this domain. Evidence:

- Homepage: no company name, registration number, licence claim, or legal pages are present.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Transport security: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19.

### What to Verify Next

Verification should start with who commissioned and controls this deployment. Anyone who received this address in an email, message, or invitation should confirm with the sender, through a channel known independently of that message, that it is genuine. If the address was presented as a login or customer portal, the organisation's official website should be reached by typing its known address directly, and the portal link there compared. The hosting platform's abuse process can be asked whether the deployment is active, claimed, or flagged. Any organisation named in the original message should be asked to confirm that this address belongs to it. Evidence:

- Homepage: the only reference is the platform's own internal deployment ID, which the platform can use to look up the tenant.
- Sandbox runs: concealed password-type fields on a page with no visible login indicate that the content served can differ from what is displayed.

### Summary Verdict

The available evidence supports a clearly cautionary posture. The site's identity is unverified, and a confirmed multi-source reputation hit coincides with concealed credential-capable elements and unstable runtime behaviour. Technical hygiene and the neutral appearance of the visible page do not outweigh these contradictions. The site is not suitable for any sensitive interaction.


### Infrastructure Integrity

The site sits behind an AWS-based CDN/WAF, and every observed address is an edge node. The origin server was not observable, so the hosting cannot be verified independently, and content can be swapped behind the edge without a visible change in network identity. The protective layer is a mitigating factor only. It does not offset the external threat detections or establish legitimacy.


### Closing Assessment

Do not log in, enter credentials, make payments, or share personal or financial data on this address. Passive viewing carries limited risk. Any message that pointed here should be treated as unconfirmed until the supposed sender verifies it by an independent route.


_Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, page content.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`)
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page replaced a large part of its own content after loading. (Behaviour in a sandbox `rule:BEHAV_DOM_CHANGE_HIGH`)

### 03 Page content
- The page appears to present itself as a known brand it is not verified to belong to. (Page content `rule:PAGE_BRAND_SUSPECTED`)

### Signals weighed against the site

- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of portal-moonshot-gc5.netlify.app.

- The request stayed on portal-moonshot-gc5.netlify.app. It was not redirected to another domain. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 0% confidence, 2 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about portal-moonshot-gc5.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [portal-moonshot-jbe.netlify.app](https://trustsniffer.com/report/portal-moonshot-jbe.netlify.app), a similar name (Critical Risk, 0/100)
- [portal-moonshot-ccy.netlify.app](https://trustsniffer.com/report/portal-moonshot-ccy.netlify.app), a similar name (Critical Risk, 0/100)
- [portal-moonshot-3an.netlify.app](https://trustsniffer.com/report/portal-moonshot-3an.netlify.app), a similar name (Critical Risk, 0/100)
- [portal-moonshot-b0g.netlify.app](https://trustsniffer.com/report/portal-moonshot-b0g.netlify.app), a similar name (Critical Risk, 4/100)
- [portal-moonshot-p35.netlify.app](https://trustsniffer.com/report/portal-moonshot-p35.netlify.app), a similar name (Critical Risk, 0/100)
- [portal-moonshot-jsx.netlify.app](https://trustsniffer.com/report/portal-moonshot-jsx.netlify.app), a similar name (Critical Risk, 0/100)
- [portal-moonshot-yhr.netlify.app](https://trustsniffer.com/report/portal-moonshot-yhr.netlify.app), a similar name (Critical Risk, 0/100)
- [portal-moonshot-amv.netlify.app](https://trustsniffer.com/report/portal-moonshot-amv.netlify.app), a similar name (Critical Risk, 0/100)
- [robbyridltrucking.com](https://trustsniffer.com/report/robbyridltrucking.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [hurmpf.fr](https://trustsniffer.com/report/hurmpf.fr), another site assessed as critical-risk (Critical Risk, 6/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)
- [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses)
- [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/portal-moonshot-gc5.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/portal-moonshot-gc5.netlify.app · assessed 2026-10-20.*