Is portal-moonshot-uh6.netlify.app safe? TrustSniffer's low-trust assessment: 25/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain on Netlify's free hosting platform. It currently serves only the generic "Site not found" error page, which tells the visitor that the requested address does not exist on the platform and invites them to build their own site. It shows no products, pricing, services, or stated business purpose. The "portal" wording in the hostname is the only hint of an intended function, so the site's real purpose and business model cannot be inferred from what it displays.

Scam/Impersonation Risk: The evidence contains confirmed adverse contradictions, and this section carries the main weight of the assessment. The domain is currently blacklisted: several independent detection engines classify it as malicious, and a recognised tier-one endpoint-security vendor is among them. The available data does not say what the detections are for. Phishing, malware, and impersonation are not individually confirmed, so the listing should be read as a serious reputational warning, not a specific accusation. Two further observations make it worse. First, the sandbox found hidden forms and password-type input fields in every run, even though the visible page is a plain error message with no form. Second, the page's structure changed heavily after interaction. A page that displays an error while carrying concealed credential-capable form elements and unusually volatile content is consistent with a placeholder that can be swapped for a lookalike login page, or with content that behaves differently from what it first shows. The hostname also closely resembles the hosting platform's own name, and the page reuses that platform's error template, so a visitor could mistake it for a legitimate platform page. No conflicting legal identities were found, because the site publishes none. A small number of abuse reports exist against an address on the shared provider network, but they are attributed to the provider's shared infrastructure and discounted, so they do not count against this site.

Regulatory Verification Notes: The site makes no licensing or registration claim, names no operating company, and publishes no legal, terms, privacy, about, or contact pages. The homepage is a platform error page, so this is a content gap in what the site discloses, not a finding of wrongdoing. Real-world operator identity remains unverified. The ownership and governance opacity is compounded by the site's age and by the adverse external reputation. Nothing on the site supports any claim of regulated status. Third-party broker databases returned no match, which adds neither reassurance nor concern. The valid, organisation-validated certificate belongs to the hosting platform. It shows that the connection is encrypted and that the platform is legitimate. It says nothing about who operates this particular site.

What to Verify Next: The first step is to establish why anyone is directing traffic to this address. If the link came through an email, message, advertisement, or QR code, the sender should be contacted by a separately sourced channel, not by replying to the message. The organisation's official website should be reached by typing its known address directly or through a trusted bookmark. Any request to log in, enter a password, connect a wallet, or pay at this address should be treated as unverified until the organisation's legitimate domain is independently confirmed. The security status should be rechecked later: if a real service is eventually deployed, the listings should clear and a corporate identity should be published before the site is reassessed.

Summary Verdict: The site is assessed as low trust with an elevated risk posture. A confirmed external blacklisting, concealed form behaviour, a very recent first appearance, and an operator who cannot be identified converge on a cautionary conclusion. The one positive technical signal, a valid certificate, does not offset them. Legitimacy cannot be established on the available evidence, and the adverse indicators are decisive.

Infrastructure Integrity: The site is served from Amazon-operated infrastructure behind the hosting platform's CDN layer, using a valid, organisation-validated certificate from a recognised issuer. All observed addresses are edge nodes, and the origin server is not observable. This mitigates only the risk of mis-hosting or abuse of the transport layer. It cannot offset the reputation signals, and edge-only visibility prevents independent verification of what is hosted and allows content to be swapped quickly.

Closing Assessment: This address should not be used for logging in, entering credentials, making payments, or any financial activity. Any link that led here should be treated with suspicion and reported to the organisation or platform it claimed to represent. Merely viewing the error page is low in consequence, but nothing should be entered or downloaded.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.