moonshot-quest[.]com

moonshot-quest.com entered the PhishDestroy evidence set on Mar 3, 2026. The hostname explicitly references Moonshot; stored content metadata identifies the same apparent target. The stored content classification is crypto scam. The assembled evidence scores 100/100 (critical).

Four independent sources are positive: VirusTotal, MetaMask, SEAL, and URLQuery. VirusTotal recorded 14 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, LevelBlue, Lionic, SOCRadar, Sophos on Jul 13, 2026 at 03:20 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. URLQuery recorded 2 detections on Mar 3, 2026 at 21:01 UTC. The evidence is not unanimous. On Mar 3, 2026 at 22:59 UTC, Google Safe Browsing returned no flag; PhishStats returned no feed match. URLScan completed without a malicious verdict (score 0).

HTTP 301 was recorded on Aug 7, 2026 at 10:23 UTC. Registration records for the domain list Hello Internet Corp as the registrar and Mar 3, 2026 as the creation date. Registration preceded first observation by 0 days. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (Cloudflare, Inc.). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. Captured page title: “Index of /”. DOM analysis completed on Jul 11, 2026 at 02:20 UTC; stored DOM score 63/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 02:27 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists E7 as the certificate issuer with validity through Jun 1, 2026; checked Mar 15, 2026 at 05:45 UTC.

Taken together, the page content and independent findings support classifying this hostname as Moonshot-themed crypto scam.