Is portal-moonshot-z3f.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This web address is a subdomain on Netlify's free hosting platform, and it currently serves only the platform's default "Site not found" error page. The page states that the link is broken or the URL does not exist on Netlify, and it carries no products, services, company description, contact details or legal content. The hostname suggests a "portal", but no business model or purpose can be read from the page itself. What the address does present is a generic placeholder that offers nothing a visitor could legitimately transact with.

Scam/Impersonation Risk

Contradictory signals are present, and they are serious. Multiple independent threat-intelligence engines currently flag this address as malicious, including a major tier-one security vendor. Together with a corroborating external listing, this amounts to a confirmed blacklist condition. The visible page is also at odds with the site's observed behavior. A static error screen should be inert, yet automated sessions found hidden forms in every run, including password-type fields. They also recorded very large page restructuring after interaction and a final destination that did not match the requested one. Almost all observed network activity went to external destinations. This pattern fits a placeholder that can be swapped to a credential-collection page, or that redirects, once a visitor engages. A brand-lookalike indicator also points to the hosting platform's own name. That is a similarity flag, not a confirmed impersonation. No conflicting legal identities were found, because the page names no entity at all. No suspicious contact address was observed. Evidence:

• Homepage: shows only the generic "Site not found" screen with no business content, so the malicious detections cannot be explained or offset by any legitimate offering.
• Homepage behavior: hidden forms, including password fields, were detected across all three sandbox runs although the visible page shows no form.
• Homepage behavior: the page changed on a very large scale after simulated interaction, and the final destination did not match the requested one.
• Reputation: five engines rated the address malicious and one suspicious, and an external blacklist listing is active.

Regulatory Verification Notes

The page contains no legal, terms, privacy, about or contact content. It names no operating entity, licence or registration. The only identity-bearing artifact is the transport-encryption certificate. It is issued to the hosting platform itself, not to an independent operator, so it confirms the platform's identity and not the identity behind this address. The operator's real-world identity therefore remains unverified. No third-party broker or regulatory-database entry matched this address, so no external reputational or licensing context exists. Given the active blacklist condition, the absence of regulatory standing removes any basis for treating the site as an accountable, supervised counterparty. Evidence:

• Homepage: no company name, jurisdiction, licence number, terms or privacy content is shown.
• Transport encryption: an organization-validated certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).

What to Verify Next

Anyone who received this address through a message, advertisement or referral should establish its source before taking any other step. Identify who supplied the link and confirm independently, through a channel not offered by the link, that they are a genuine party and that this address is theirs. If a legitimate service is expected, obtain its official address directly from that organization's known website or from printed or contractual material, and compare it character by character with this hostname. If a deployed site is expected here, only its account holder on the hosting platform can confirm whether it was ever published, was removed, or was replaced. Any message that directed a recipient to this address should be reported as suspicious to the relevant security team. Evidence:

• Homepage: shows no operator, contact channel or destination that could be used to confirm a legitimate service.
• Hostname: a generic, auto-generated subdomain pattern that does not match any identifiable brand.
• Page behavior: hidden password-type forms are present on a page that displays none.

Summary Verdict

This address carries an elevated, high-risk posture. Confirmed adverse reputation across several independent sources, combined with concealed credential-type forms behind an inert-looking error page, outweighs the technically sound encryption certificate and mainstream hosting. No legitimate service, owner or accountable operator can be associated with the address.

Infrastructure Integrity

The address resolves to four addresses in the Amazon Web Services network, all of them content-delivery edge nodes. The origin server was not observable. A valid organization-validated certificate and mainstream cloud delivery are mitigating factors only, and they do not offset the reputation findings. Four abuse reports were recorded against one of the edge addresses. That address belongs to shared provider infrastructure, so the reports cannot be attributed to this site with confidence and count only as weak context. The shared edge layer also prevents independent hosting verification and can mask rapid content swaps.

Closing Assessment

Do not enter credentials, sign in, make payments or submit personal or financial information at this address. Opening it should be limited to passive, isolated inspection by a security team. Anyone who has already interacted with it should change any affected passwords and report the link as suspicious.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.