Is dev-movequest.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

Overview

This is a single-page website titled "Move Quest". It is served from a development-labelled subdomain on a free, shared page-hosting platform rather than from a standalone branded domain. A visitor receives a short front page, and the available evidence does not establish a product, service, or commercial model beyond that. The site's apparent purpose is therefore unconfirmed, and its development-style naming suggests a staging or prototype deployment rather than an established public business.

Scam/Impersonation Risk

Contradictory signals are present, and they decide this assessment. The site is blacklisted. Several independent threat-intelligence engines currently flag it as malicious, and a separate external blacklist listing corroborates them. Their convergence is the decisive factor, and the site's technical hygiene does not offset it. No conflicting legal identities and no confirmed brand impersonation were observed, and the major browser-safety service raised no flag. The risk therefore rests on the reputational listing, not on a demonstrated impersonation. The domain is also young, and its archived history is thin. Its operator has not been independently connected to any real-world person or organisation, so no accountable party stands behind the listing. Browser-behaviour testing found a heavy volume of calls to external services, including repeated outbound data submissions, and a notable number of script errors on the front page. All of these calls went to recognised destinations. The testing detected no wallet-connection prompts, clipboard tampering, hidden forms, credential forms posting off-site, cloaking, or fingerprinting. That absence of overt abuse mechanics narrows the concern, but it does not neutralise the active blacklisting. Evidence:

• Homepage reputation check: four threat-intelligence engines rated the site malicious and one rated it suspicious, alongside a separate external blacklist hit.
• Homepage behaviour test: 102 external XHR/fetch calls and 9 external POST requests, with up to 51% of traffic going to external hosts and 12 console errors. All external destinations were recognised, and no wallet, clipboard, hidden-form, or cloaking activity was recorded across 3 successful runs.
• Domain provenance: the domain is about 1.9 years old (695 days). The web archive holds 11 snapshots spanning November 2024 to March 2025 (2 years tracked), with no repurposing or content drift.

Regulatory Verification Notes

The site presents no confirmed licensing, registration, or corporate-identity information, and its operator remains unverified. The platform-subdomain naming does not tie the site to any named legal entity. For this reason the site's apparent legitimacy cannot be assumed on the strength of what it displays. No third-party broker or regulatory database matched the site, so there is no external reputational record to weigh in either direction. The site's transport security is valid. It confirms an encrypted connection only, and says nothing about who operates the site or whether the operator is authorised to offer any service. Evidence:

• Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (domain-validated only), valid to 2026-12-05.
• Broker and regulator lookup: no match found in the reputational dataset.

What to Verify Next

Before any engagement, the operator's real-world identity should be established through channels independent of the site. This means checking whether any named company exists in the relevant corporate registry, and whether the entity holds a licence relevant to what the site eventually offers. If a "Move Quest" brand or product is claimed, its official domain should be confirmed through the project's verified public channels rather than through links on this page. It should also be confirmed that the development-labelled subdomain is an intended public property of that operator. The threat listing should be rechecked after the operator remediates, because a stale or resolved listing would change the picture. Any official support or contact channel should be confirmed through an independent route. Evidence:

• Homepage and domain naming: the site is hosted on a development-labelled subdomain of a shared hosting platform, with no named operator.
• Reputation status: the blacklist and malicious-detection status is current as of this assessment and should be rechecked later.
• Registry and brand checks: no registry match or official-brand link is available from the evidence to confirm the site's affiliation.

Summary Verdict

The overall posture is high-risk. Active third-party threat detections, together with an unverified operator and a young, thinly documented web presence, put the site in the elevated-risk tier. The supportive technical signals are real but secondary, and they do not outweigh the reputational listing. Any sensitive use of the site is inadvisable until the detections are cleared and the operator is identified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge nodes, so the origin server is not visible. This reduces direct exposure of the origin and is a mitigating factor only. Edge-only visibility also prevents independent verification of the underlying host and can mask rapid content changes. Protective infrastructure cannot offset the current threat-intelligence detections.

Closing Assessment

Account sign-in, credential entry, wallet connection, and any payment or financial interaction should be avoided entirely. At most, passive viewing is defensible, and only from a hardened or isolated browser environment. The site should be reassessed only after the operator is identified and the external detections are formally cleared.