Is portal-moonshot-pw8.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain on Netlify's shared hosting platform, and the only content it serves is Netlify's default "Site not found" 404 page. The page tells the visitor that a broken link was followed or that a URL does not exist, and it includes a platform reference ID and a prompt to "build and deploy your own site for free." It carries no products, pricing, contact details, business description or monetization model, so its purpose and operator cannot be determined from what it publishes.

Scam/Impersonation Risk

The assessment is elevated and clearly cautionary. The site is blacklisted by external threat-intelligence sources, and several independent security engines classify the hostname as malicious, including one tier-one security vendor. This reputation signal is decisive. The page content itself shows no scam mechanics, because it offers no products, yields or claims to evaluate. The evidence therefore rests on external detections and on the sandbox's behavioral observations. The sandbox found hidden forms, including password-type fields, in every run, although the visible page is a bare error screen. Document structure also changed heavily after interaction, which is not normal for a static 404 page. That pattern suggests content or form elements that are not shown to a casual visitor. It is consistent with a placeholder or staging pattern that could be swapped for a credential-collection page. The evidence does not prove this. A lookalike signal against the hosting platform's own name was also raised, but this is a platform subdomain and no brand impersonation or conflicting legal identities were confirmed. Separately, four abuse reports exist against one of the shared edge addresses serving the site. These are attributed to shared provider infrastructure and are not specific to this operator, so they reinforce the reputational picture without adding site-specific proof.

Regulatory Verification Notes

There are no legal, about, terms or licensing pages to assess, because the only content is the platform's error response. No operating entity, registration number, licensing authority or complaint channel is stated anywhere on the site. This is a content gap, not evidence of a scam on its own. The site's real-world operator is not independently connected to any known person or brand, so no legitimacy can be inferred from on-site identity claims. The valid organization-validated certificate names the hosting platform as its subject, not the site's operator, so it confirms the platform's identity only. No broker-reputation record matched the site, so no third-party regulatory or reputational context is available. The blacklisting described above is a reputational signal and not a licensing or legal verdict.

What to Verify Next

Anyone who received this link should confirm through an independent, offline route (a known phone number or an official channel) which organization, if any, intended to publish it and what its correct address is. The intended destination should be reached only through a source the user has already trusted, not through this link. If the link arrived by email, message or advertisement, the sender's authenticity should be established before any further interaction, and the message should be reported to the relevant security team or platform abuse channel. An operator that claims to provide financial or account services should also be asked for its registry-verifiable corporate and licensing details. Any such details should be checked directly with the issuing registry.

Summary Verdict

The site carries a critical, high-severity risk posture driven by confirmed external blacklisting and by hidden credential-style form behavior on an otherwise empty page. Identity is unverified and no legitimate purpose is evidenced. Technical hygiene and a valid certificate do not offset this assessment.

Infrastructure Integrity

The site is served entirely through Amazon-operated edge infrastructure behind Netlify's shared platform, and all observed addresses are edge servers. The true origin server was not observable. Because the platform hosts many unrelated sites on common addresses, this arrangement mitigates some exposure but cannot independently establish the legitimacy of this site. It also prevents independent verification of the hosting and allows content to be swapped quickly without any change in the visible address. Protective infrastructure is treated here as a mitigating factor only, and it does not outweigh the external threat detections.

Closing Assessment

The site should be treated as high-risk. Account logins, credential entry, payment details and any financial interaction should be avoided. Read-only viewing is the only use that fits the evidence, and any link that led here should be treated as untrusted until the sender has been independently confirmed.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.