Is verified-moonshot.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as "Vote to List — Powered by Moonshot", a single-page, token-listing-style service whose domain name pairs the words "verified" and "moonshot". The homepage appears to invite visitors to take part in a community vote on which projects get listed. Its business model and operator could not be established from the captured content.

Scam/Impersonation Risk

Several major security vendors currently flag this domain as malicious or suspicious, and the domain is blacklisted. This is a confirmed adverse reputation finding, and it is the main reason for the cautionary posture of this report. No brand impersonation, phishing-kit signature, or conflicting legal identities were observed in the captured content. The risk therefore rests on the blacklisting and on the domain's youth, not on a proven impersonation of a named brand. The domain name itself uses the trust-signalling word "verified" in front of a speculative-market term, which is a common social-engineering pattern for sites that ask visitors to vote on listings or connect assets. In automated browsing, the homepage loaded stably over three runs. It showed no wallet-connection prompts, no clipboard manipulation, no hidden forms, and no cloaking. The same runs recorded heavy third-party activity: external requests made up most of the observed traffic, with 11 external data requests and 6 external POST submissions. They also recorded 12 console errors and a very large number of page changes after the first interaction. None of this is conclusive alone, but together with the blacklisting it points to a page that sends data to outside parties and rebuilds itself dynamically. Evidence:

• Homepage: multiple leading security vendors classify the domain as malicious or suspicious, and a blacklist hit is recorded.
• Homepage behaviour: 11 external XHR/fetch calls, 6 external POSTs, and 12 console errors across 3 browser runs; no wallet-connect, clipboard-write, or hidden-form activity was detected.
• Domain registration: created 2026-06-07, about 0.39 years (~142 days) old, which is a very recent registration for a site seeking public participation.

Regulatory Verification Notes

The captured homepage does not present a clear legal entity, licence, registration number, or governance disclosure, and no dedicated legal or terms page was available in the evidence. The site's operator therefore cannot be connected to any real-world person or company, and ownership is opaque. This is a verification gap rather than a violation, but it matters more here because the site already carries a confirmed reputational warning. No third-party broker or regulator record matched the domain, so no external regulatory standing can be inferred in either direction. The domain is registered through NICENIC International Group Co., Limited with an expiry in 2027-06, and the registration record is incomplete as to the registrant. Evidence:

• Homepage: no operating company, licence, or registration identifier is disclosed.
• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED; registered 2026-06-07, expires 2027-06-07.
• Hosting network: AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-02; DV validation confirms control of the domain but says nothing about the operator's identity.

What to Verify Next

Any prospective interaction should first be preceded by checking whether the project or exchange that the page claims to list or represent actually acknowledges this domain on its own official channels, reached independently of this site. The "Moonshot" branding should be compared with the legitimate platform of that name, if one exists, to establish whether this domain is an authorised property or an unrelated lookalike. The operator should be asked for a registered legal entity and for the licence or authorisation relied upon for any listing or voting service. Independent contact channels should be confirmed through an offline route. If the domain is the user's own, the owner should review the site for compromise and request delisting once it is clean. Evidence:

• Domain name: pairs "verified" with "moonshot", so any claim of official status should be confirmed from outside the site.
• Homepage title: "Vote to List — Powered by Moonshot", a listing-and-voting proposition that makes no verifiable claim of authorisation.
• Registration record: the registrant is incomplete, so the owner cannot be confirmed from registry data alone.

Summary Verdict

The assessment is critical. Confirmed external threat detections override every mitigating factor, and the domain's youth and unidentified operator reinforce that conclusion. The site presents as an unverified, high-risk property, and its legitimacy cannot be inferred from its working technical hygiene.

Infrastructure Integrity

The site is served through Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address, so the origin server is not visible. This is a mitigating factor: the infrastructure is mainstream, the TLS certificate is valid, and the hosting network carries no abuse history. The edge-only visibility also prevents independent verification of the true host and can conceal rapid content changes. Protective infrastructure cannot offset the reputational findings above.

Closing Assessment

Treat the site as read-only at most. Do not enter credentials, connect a wallet, approve transactions, or make any financial commitment on this domain until the threat detections are cleared and the operator is independently identified.