Is portal-moonshot-hqj.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website is an unbranded subdomain on a public application-hosting platform that currently serves only the platform's generic "Site not found" error page. The homepage shows no business name, products, offers, navigation, contact details or stated purpose. It reads as an unclaimed, removed or unpublished deployment and not as an operating business, so no business model can be identified.

Scam/Impersonation Risk

Confirmed contradictory signals are present, and the posture is cautionary. Multiple independent threat-intelligence sources currently flag the site as malicious or suspicious, which amounts to a confirmed blacklist-level reputational finding. It is the decisive factor in the assessment. Brand-similarity analysis also flagged resemblance to the hosting platform's own name. That resemblance is largely structural, because the address is a subdomain of the platform's domain. No impersonation of a specific third-party brand was confirmed. Behavioural testing found hidden form structures on every run, including password-type fields, and very heavy page-structure rewriting after interaction. This does not fit a static error page that visibly contains no forms. It suggests that content can be swapped in behind the error screen or that dormant credential-capture markup exists. The page does not show a visible login or payment prompt, and no wallet-connection, clipboard or drainer behaviour was observed. Two abuse reports exist against one of the shared edge addresses. They are discounted because that address is shared provider infrastructure, and they are not attributed to this site. No conflicting legal identities appear, because the site presents no identity at all. Evidence:

• Homepage: two threat-intelligence engines rate the address malicious and one rates it suspicious, and an external blacklist flag is set.
• Homepage behaviour testing: hidden forms were detected in all 3 runs, with 3 password-type forms and about 4,130 DOM mutations after interaction, against a page with no visible forms.
• Hosting edge: 2 abuse reports on the shared edge address are discounted as shared-infrastructure noise.
• Homepage content: the only visible text is the platform's "Site not found" notice and a "Start building" prompt, so no brand or entity claims can be tested.

Regulatory Verification Notes

The page contains no legal, terms, privacy, about or contact content and states no company name, jurisdiction, licence or registration number. No licence is claimed, so nothing can be checked against a registry. The real-world operator is therefore unverified, and no third-party broker or regulator record is associated with the site. The valid organisation-validated certificate belongs to the hosting platform and not to whoever controls this subdomain. It confirms encrypted transport and the platform's identity, not the site operator's. Evidence:

• Homepage: no licence, registration number, legal entity or jurisdiction is stated.
• Transport layer: the certificate is organisation-validated (OV), issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).

What to Verify Next

The first step is to establish through an independent route how the address was obtained, such as a message, advertisement or referral. The sender should be asked, through a separately known channel, which destination was intended and whether the operator still controls this subdomain. The address should be re-assessed later because deployments on such platforms can change from an error page to live content without notice. Any official channel for the intended service should be confirmed through the organisation's established public presence and not through this address. Evidence:

• Homepage: the page offers no way to identify its operator or reach support.
• Behaviour testing: page content changed heavily after interaction, so the current error screen may not persist.
• Reputation: the threat-intelligence listings are current, and their status should be checked again before any reassessment.

Summary Verdict

The assessment is critical. Active threat detections, hidden form behaviour that contradicts the visible page, and an unverified operator outweigh the valid encryption and mainstream hosting, which only mitigate. The evidence does not establish a specific scam, but it supports a high-risk classification, and the site cannot be treated as a safe or legitimate destination.

Infrastructure Integrity

The site sits behind AWS-based edge infrastructure. All four observed addresses are edge nodes, and no origin server was observable. That limits independent verification of what actually hosts the content and allows content to change quickly. The platform is mainstream and the infrastructure is itself reputable, so it mitigates exposure but does not offset the reputational findings.

Closing Assessment

Any use of this address should be limited to passive viewing. No credentials, personal data, wallet connections or payments should be submitted to it, and any link, form or download that appears there should be treated as untrusted until the operator is independently identified and the current threat listings are cleared.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.