Is portal-moonshot-n8x.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a freshly registered hosted subdomain on a public site-building platform. Its homepage currently shows only the platform's generic "Site not found" 404 message, with no business content, branding, forms or contact details. Its purpose and business model cannot be determined from what is served, and the page reads as an inactive or removed deployment, or as a placeholder.

Scam/Impersonation Risk

Contradictory signals are present, and they place this site in a clearly cautionary category. Multiple independent threat-intelligence sources currently flag the domain as malicious, and a major security vendor is among them. This amounts to a confirmed blacklist hit, and it is the decisive finding. Behavioural testing adds to the concern. Across all three sandbox runs, the otherwise empty error page contained concealed form structures, including password-type fields, and its page structure changed on a very large scale after interaction. A page that displays only a 404 notice should not contain credential-capture markup. This pattern is consistent with a staging or credential-harvesting kit that can be switched on and off behind a benign-looking front. The name also closely resembles the hosting platform's own domain. This is a lookalike signal, but no brand impersonation or phishing page was confirmed. Two abuse reports exist against an address on the hosting provider's shared network. They apply to shared provider infrastructure, carry no confidence weighting, and are discounted, so they do not add to the case against this site. No conflicting legal identities were observed, and no financial products, claims or contact channels were published that could be assessed. Evidence:

• Homepage: the visible content is a hosting-platform "Site not found" notice stating the path does not exist, with no products, claims or contact information.
• Homepage behaviour: three hidden forms, including password-type fields, were detected in every sandbox run, although no form is visible, and the page structure mutated heavily after interaction.
• Domain reputation: several threat-intelligence engines classify the domain as malicious, and one top-tier vendor flags it.
• Domain provenance: registered in 2026 (~13 days old), with a single archive snapshot captured on 2026-10-07 and no earlier history.

Regulatory Verification Notes

The site publishes no legal, terms, privacy or about pages, and no operator name, licence or registration number. Its real-world operator therefore cannot be independently connected to any person or business, and ownership remains opaque. This is a verification gap, not evidence of wrongdoing by itself, but here it compounds the confirmed threat detections. No third-party broker or regulatory-database match was found, so there is no external reputational signal to weigh in either direction. The site has a valid organisation-validated certificate. That certificate belongs to the hosting platform, not to the site's operator, so it confirms transport encryption only and says nothing about who runs the site. Evidence:

• Homepage: no company name, licence, regulator reference or policy pages are present.
• Transport security: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV) to Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).

What to Verify Next

Before any interaction, confirm independently whether the party that directed the user to this address is genuine, through a channel that did not come from the link itself. Check the address character by character against any official platform or brand address the user expects to reach. Establish who operates the site and under what authority, through the relevant corporate or licensing registry, before treating it as a real business. If a login, wallet or payment page later appears at this address, it should be treated as unverified and reported to the hosting platform's abuse channel instead of being used. Evidence:

• Homepage: no official channel or identity is published that could be cross-checked.
• Page behaviour: the concealed credential-type forms mean any later content at this address could collect sensitive data.

Summary Verdict

The overall posture is elevated risk. The confirmed threat detections outweigh the benign appearance of the current page and the technical hygiene around it. Neither is sufficient to offset the reputational findings. The operator's real-world identity is unverified, so legitimacy cannot be inferred from the site's appearance.

Infrastructure Integrity

The site is served from Amazon's cloud network behind a mainstream hosting and delivery layer. All observed addresses are edge nodes, and the origin server is not visible. This is a mitigating factor only, and it also prevents independent verification of the hosting. It does not offset the confirmed threat detections or the concealed form behaviour. The same edge arrangement allows content to be swapped without any visible change at the address.

Closing Assessment

Treat this address as unsafe for any login, credential entry, wallet connection or payment. Limit contact to passive viewing, and do not download anything or follow any redirect from it.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.