Is quest-jimothy.world a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a very recently created domain whose homepage carries the title "FASTPANEL" and only a short passage of text. It presents no identifiable product catalogue, company narrative or service description. Its apparent purpose is therefore unclear. The name suggests a hosting or control-panel style landing page, but nothing on the page establishes who operates it or what it offers.

Scam/Impersonation Risk

This is the decisive area of concern. Multiple major security vendors currently flag the domain as malicious, and a further group rates it suspicious. The detections are strong enough that the site is treated as confirmed blacklisted by external reputation sources. No brand impersonation, phishing page or conflicting legal identities were observed on the page. No contact-channel anomaly was published either. The risk therefore rests on the reputation evidence and on the profile of a brand-new, low-content domain, not on content-level deception. Browser behaviour testing found no wallet-drainer activity, clipboard hijacking, hidden forms, credential forms posting to external hosts or cloaking. These are mitigating observations only and cannot offset the reputation findings. The homepage nonetheless generated heavy external activity: a large number of third-party requests and outbound data submissions for such a sparse page, several to destinations outside the usual set of trusted services. This is atypical for a page with so little visible content. Evidence:

• Homepage: titled "FASTPANEL", with only a few hundred characters of visible text and no products, pricing, company details or policies.
• Reputation checks: 11 malicious and 3 suspicious verdicts from the security-vendor panel, including two top-tier vendors, which triggered the external blacklist override.
• Domain provenance: registered 2026-08-23 (~0.17 years old) through NICENIC International Group Co., Limited.
• Web archive: a single snapshot, in 2026, covering one year tracked, so there is no prior history to show continuity.
• Homepage behaviour testing: 60 external network requests, including 36 external XHR/fetch calls and 24 external POSTs. Three destinations were not on the recognised-services list.

Regulatory Verification Notes

The site publishes no legal, terms, privacy or about content that could be assessed. It names no operating company, registration number or licence. With so little on-site content, nothing can be tested for identity consistency. Registration details are incomplete as well, which amounts to ownership opacity and is not an identity contradiction. The operator's real-world identity is unverified, so any apparent legitimacy cannot be inferred from the available signals. Technical hygiene is basic: the site uses valid transport encryption, but this only confirms an encrypted connection and says nothing about who runs the site or whether it is safe. No third-party broker or regulator profile matched this domain. Evidence:

• Homepage: no company name, licence, registration number, jurisdiction or contact details are published.
• Transport encryption: domain-validated TLS certificate issued by WE1, valid to 2027-01-19, which is encryption only and no proof of operator identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Registration record: owner details are incomplete or hidden.

What to Verify Next

No sensitive interaction should begin until the operator is independently identified and the external detections are resolved. Ask the party that supplied the link what the site is meant to do, and confirm the official site address through an independent, offline route. Check the domain against the relevant company or financial registry if any business claim is later made. Confirm the official support and contact channels through that same route. Re-run the reputation checks later, since vendor flags can be cleared or added as new information emerges. Evidence:

• Homepage: no operator, product or service claim exists that could be tested against a registry.
• Domain provenance: the domain is about two months old, so the operator has no public track record to cross-check.
• Reputation checks: the current vendor detections are the primary open item and should be re-checked after any change.

Summary Verdict

The overall posture is high-risk and clearly cautionary. External security intelligence is decisively adverse, and the domain is too new and too thin in content to offer any counterweight. The site should be regarded as unsafe for login, credential entry or financial activity, and at most suitable for passive, read-only observation.

Infrastructure Integrity

The site is fronted by a mainstream CDN and WAF, and all observed addresses are edge servers. The origin server was not visible, so the underlying hosting cannot be independently checked, and rapid content changes behind the edge could go unnoticed. The protection is a mitigating factor only. It does not reduce the reputation risk and does not indicate legitimacy.

Closing Assessment

Refrain from logging in, supplying credentials or personal data, connecting payment instruments or downloading anything from the site. Do not follow links to it from unsolicited messages. Treat it as unsafe until the operator is independently identified and the security-vendor detections are cleared.