# dewanusa.quest — SUSPICIOUS

> PhishDestroy flags dewanusa.quest as a crypto-draining phishing page registered 2026-02-24; VirusTotal shows 0/95 detections.

## Summary
PhishDestroy identifies dewanusa.quest as a live crypto-draining phishing domain currently under investigation.

This domain was flagged because it is designed to trick visitors into connecting cryptocurrency wallets and signing malicious transactions that drain funds. According to our telemetry, the site has not yet been detected by VirusTotal scanners (0 detections out of 95 engines) and remains active. The domain was created on February 24, 2026, and is registered through Namecheap Inc using a Let’s Encrypt SSL certificate, making it appear legitimate at first glance.

If you visited this site, do not approve any wallet connection requests or transaction prompts. Disconnect immediately, revoke any unauthorized approvals in your wallet settings, and transfer remaining funds to a new wallet. Report the domain to PhishDestroy and your wallet provider to help block it for others.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-24 10:27:55
- Registrar: NAMECHEAP INC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9cddfd4b-17be-4530-9b26-0641479de77d
- PhishDestroy: https://phishdestroy.io/domain/dewanusa.quest/
- LLM endpoint: https://phishdestroy.io/domain/dewanusa.quest/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dewanusa.quest/
Last updated: 2026-03-23