Is portal-moonshot-t1t.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain on a managed static-site hosting platform. It presents only the platform's generic "Site not found" error page, which says the visited path does not exist and invites visitors to build their own site. The page offers no products, pricing, forms, links or description of any service, so no business model or intended purpose is visible.

Scam/Impersonation Risk

Confirmed contradictions are present, and they drive a cautionary reading. Multiple security engines independently classify the address as malicious, and a tier-one security vendor is among those flagging it. This amounts to a confirmed blacklist listing that infrastructure protections cannot offset. The visible page is a benign-looking error shell, so the page content does not explain these detections. In the automated sandbox, however, hidden forms were detected in every run, and password-type form elements were also found. The visible page itself shows no forms at all. Large post-load page changes also occurred after interaction, which means content is generated dynamically beneath a placeholder. That pattern is typical of a shell that can be swapped or activated later. The page analysis also flagged the address as a close lookalike of the hosting platform's own domain. This is a similarity flag only, and no impersonation was confirmed. Four abuse reports exist against a shared edge address of the hosting provider. They are attributed to shared infrastructure rather than to this site specifically, but they do not reduce the weight of the direct detections. No contradictory legal identities were observed. No contact address is published. Evidence:

• Homepage: the only content is a "Site not found" error page, 368 characters long, with no declared forms, links or services.
• Sandbox behaviour (3 of 3 runs): hidden forms and password-type elements were detected on a page that visibly contains none, with about 4,130 DOM mutations after interaction. No cloaking, wallet-drainer or clipboard-hijack behaviour was observed, and no outbound requests went to non-whitelisted destinations.
• Archive history: 1 archive snapshot, first and last seen 2026-10-06, so about 13 days of recorded history (domain age ~0.04 years, registered/first observed 2026).

Regulatory Verification Notes

The site presents no legal, terms, privacy or about pages, and it names no operator, company or jurisdiction. It also claims no license or registration. The real-world operator therefore cannot be tied to any identifiable person or business. Any apparent legitimacy rests solely on the hosting platform's own technical credentials, not on the site operator. The valid certificate attests to the platform, not to whoever controls this subdomain. No third-party broker or regulator listing was matched, so there is no regulatory signal in either direction. The absence of licensing information is a verification gap, not evidence of fraud by itself. Here it sits alongside the confirmed detections described above. Evidence:

• Homepage: no company name, license number, registration details or contact information is stated anywhere on the page.
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, OV validation, subject organisation Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).

What to Verify Next

The operator and purpose of this subdomain must be established independently before any engagement. Any party that supplied this address should confirm, through a separately known channel, that it is genuinely theirs and what it is meant to host. If a business claims it, the claim should be checked against the relevant company registry and, for financial services, the relevant licensing authority. The official support and contact channels should also be confirmed through an independent, offline route. The address should be re-assessed after the owner publishes real content and the external detections are cleared. Evidence:

• Homepage: the address resolves to a hosting-platform placeholder, so nothing on it can be checked against an external registry.
• Legal pages: none exist to cross-reference.
• Reputation: multiple independent detections remain active, so any later content should be treated as unconfirmed until they clear.

Summary Verdict

The assessment is a clearly elevated-risk, low-trust posture. Confirmed security detections and unexplained hidden form behaviour sit against a page that discloses nothing about its operator or purpose. Neither the valid encryption nor reputable hosting establishes who runs the site or what it is for, so the real-world identity remains unverified.

Infrastructure Integrity

The site is delivered through an AWS-based CDN and WAF layer. All four observed addresses are edge nodes, and no origin server address was observable. This is a mitigating factor only: the protection offers shared, mainstream infrastructure, but it cannot offset the direct threat detections and does not show legitimacy.

Closing Assessment

Interaction beyond passive viewing is not appropriate. Credentials, personal data, wallet connections and payments should not be submitted, and nothing should be downloaded from this address. Anyone who was directed here should be told that the link is unconfirmed and should not act on its instructions.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.