--- title: "Is portal-moonshot-slb.netlify.app Safe? Risk Report, Score 25/100" source: TrustSniffer type: Website trust & fraud report subject: "portal-moonshot-slb.netlify.app" verdict: "Low Trust" title: "Is portal-moonshot-slb.netlify.app Safe? Score 25/100" trust_score: 25 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/portal-moonshot-slb.netlify.app assessed: 2026-10-20 --- # Is portal-moonshot-slb.netlify.app safe? TrustSniffer's low-trust assessment: 25/100 ## Verdict **Verdict: Low Trust, trust score 25/100.** portal-moonshot-slb.netlify.app is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-20 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | The page is a Netlify 404 'Site not found' error screen indicating that the requested site or path does not exist. It contains no service, product, sign-in, or marketing content. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 5 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 1% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear | | Domain age | 15 days old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (1 snapshot) | Clear | | Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted | ## The page as captured ![Screenshot of the portal-moonshot-slb.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/portal-moonshot-slb.netlify.app/screenshots/first.png) _What portal-moonshot-slb.netlify.app served when TrustSniffer captured it on 2026-10-20. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. The website is a subdomain on a shared application-hosting platform, with a name styled as a "portal" (moonshot-slb). A visitor sees only the platform's generic "Site not found" 404 error screen. There is no product, service, sign-in, pricing, contact or legal content, so no business model is visible. The name reads like a login or customer-portal address, but the page presents no actual purpose. ### Scam/Impersonation Risk The evidence converges on an elevated, security-forward risk posture. The domain is **blacklisted** by multiple external threat-intelligence sources. Several independent detection engines flag it as malicious, including one top-tier security vendor, and a further engine rates it suspicious. The hosting platform's own name is suspected of being imitated in the subdomain, and the page copy reinforces that resemblance. The visible 404 page does not match the behavior observed in the sandbox. Across all three automated runs, the homepage contained hidden forms, including password-type fields, even though no form is visible. Interaction also triggered a very large burst of DOM changes, which suggests content is assembled or swapped after load. A hidden credential form behind an error screen fits a staged or dormant credential-collection page better than an abandoned deployment. This is a pattern consistent with phishing staging, not proof of an attack. The abuse reports recorded against one of the serving addresses belong to a shared platform address used by many tenants, so they are weak evidence about this site. They are not what drives the assessment. No conflicting legal identities were found, because no identity content is published at all. Evidence: - Homepage: a platform 404 "Site not found" screen with no visible forms, yet hidden forms with password fields were detected in every sandbox run. - Homepage: post-interaction DOM mutations numbered over 4,000, and the subdomain closely resembles the hosting platform's own name. - Domain provenance: the subdomain is about 13 days old (~0.04 years), with 1 archive snapshot spanning a single year (2026). - Reputation: 5 engines flag the site as malicious and 1 as suspicious, with one top-tier vendor among the detections. Four abuse reports exist against a shared platform address. ### Regulatory Verification Notes The site publishes no legal, licensing, ownership or policy content. No company name, registration number, regulator or terms page exists, and the page was classified as an error screen, so no business activity is claimed. Operator identity cannot be tied to any real-world person or organization, and governance and ownership opacity are present. Because the site makes no regulated-activity claim, this is a disclosure gap and not a licensing violation. It matters here only because it removes any mitigating accountability from the threat detections. No third-party broker or regulatory-database entry was matched for this site, so there is no reputational context from that source either. Evidence: - Homepage: the only content is a platform error notice, with no legal entity, license or policy text. - Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US). - Transport encryption: the TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, and valid to 2027-03-19. It identifies the hosting platform, not the site's operator. ### What to Verify Next Credentials, payment data or personal information should not be submitted on this address. If a message, advertisement or message thread directed someone here, its sender should be checked independently of that message. The genuine portal address should be obtained directly from the organization the "moonshot-slb" name appears to reference, through an offline or previously known channel. The destination can also be reported to the hosting platform's abuse team and to the organization it appears to imitate. If an account was already accessed from this address, its password should be changed and multi-factor authentication enabled. Evidence: - Homepage: no visible sign-in or contact path exists, so any request to log in here did not come from a legitimate page on this site. - Sandbox: password-type fields are present but hidden, which means a credential request could appear without notice. - Provenance: the very recent creation of the subdomain, with no archive history, offers no prior legitimate use to check against. ### Summary Verdict The available evidence supports a clearly cautionary, high-risk posture. Confirmed external threat detections, concealed credential-capture behavior and a very recent, unverifiable origin outweigh the technically valid encryption. The site is best treated as a suspected staging or phishing asset until proven otherwise, and its operator remains unidentified. ### Infrastructure Integrity The site is delivered through Amazon's cloud edge network, so all four observed addresses are edge addresses and the origin server could not be seen. Together with a valid certificate, this shows only that a mainstream platform hosts the site. It is a mitigating factor, not proof of legitimacy, and it cannot offset the reputation risk. The same edge-only visibility means the underlying content can be changed quickly without any change in the surface-level infrastructure. ### Closing Assessment Interaction beyond passive viewing is not appropriate: no logins, no credential entry and no financial or personal-data submission. Anyone who has already entered information here should change the affected passwords promptly and monitor the related accounts. _Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, history in the web archive, page content. ### 01 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 02 Behaviour in a sandbox - The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`) ### 03 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 04 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 05 Page content - The page appears to present itself as a known brand it is not verified to belong to. (Page content `rule:PAGE_BRAND_SUSPECTED`) ### Signals weighed against the site - AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of portal-moonshot-slb.netlify.app. - The request stayed on portal-moonshot-slb.netlify.app. It was not redirected to another domain. (Clear) - The earliest public archive of this site is from 2026-10-07. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 2a05:d014:58f:6200::258 | | Name servers | Not available | | CDN / edge network | Detected (aws) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | | SSL expiry | 2027-03-19 | | Domain age | 0.04 years (continuous registration) | | Domain expiry | Not available | | Archive first seen | 2026-10-07 | | Archive snapshots | 1 | | Reputation | VirusTotal: 5 flagged \| AbuseIPDB: 1% confidence, 4 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about portal-moonshot-slb.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [crypto-hbe.netlify.app](https://trustsniffer.com/report/crypto-hbe.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-m7v.netlify.app](https://trustsniffer.com/report/portal-moonshot-m7v.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-0uw.netlify.app](https://trustsniffer.com/report/portal-moonshot-0uw.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-gzf.netlify.app](https://trustsniffer.com/report/portal-moonshot-gzf.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-cd8.netlify.app](https://trustsniffer.com/report/portal-moonshot-cd8.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-swa.netlify.app](https://trustsniffer.com/report/portal-moonshot-swa.netlify.app), a similar name (Low Trust, 25/100) - [crypto-muv.netlify.app](https://trustsniffer.com/report/crypto-muv.netlify.app), a similar name (Low Trust, 25/100) - [portal-moonshot-88a.netlify.app](https://trustsniffer.com/report/portal-moonshot-88a.netlify.app), a similar name (Low Trust, 25/100) - [ponsdot.win](https://trustsniffer.com/report/ponsdot.win), another site assessed as low-trust (Low Trust, 25/100) - [oisywalletdesktop.com](https://trustsniffer.com/report/oisywalletdesktop.com), another site assessed as low-trust (Low Trust, 32/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens) - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) --- *Source: [TrustSniffer](https://trustsniffer.com/report/portal-moonshot-slb.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/portal-moonshot-slb.netlify.app · assessed 2026-10-20.*