Is projectsvexs.com a scam? TrustSniffer's high-risk assessment: 16/100

projectsvexs.com
Download PDF Check another site How we score

Verdict

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

16 OUT OF 100
Critical Risk

projectsvexs.com shows high-risk / scam indicators.

Sensitive Interaction Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 55%.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware engines3 flagged itVirusTotalRisk
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reportsClear
Domain age3 months oldMost scam domains are under a year oldRisk
CertificateEncrypted connectionIssued by WE1Noted
Hosted byCLOUDFLARENETServer in USNoted

The page as captured

https://projectsvexs.com/
Screenshot of the projectsvexs.com homepage captured during the TrustSniffer assessment
What projectsvexs.com served when TrustSniffer captured it on 2026-10-27. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • Domain age: less than 1 year (registration continuity).
  • At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

Full analysis

Overview

This website is a recently registered domain whose homepage could not be viewed directly. A security interstitial titled as a suspected-phishing warning stood in front of it, and the automated visit received an access-denied response instead of the underlying site. The only content a visitor sees is that short warning page, so no products, services or business model could be established, and the site's purpose is unclear.

Scam/Impersonation Risk

Contradictory signals are present and weigh heavily. The domain is blacklisted by multiple independent threat-intelligence sources. Several detection engines classify it as malicious, and a further engine rates it suspicious. The page a visitor reaches is itself a suspected-phishing warning, which corroborates those listings. No brand impersonation or conflicting legal identities were observed, but the blacklisting is a decisive contradiction. The domain was registered only a few months ago, which fits the profile of throwaway infrastructure. Behaviour testing did not show wallet-draining, clipboard hijacking, hidden forms or credential posts to outside parties. Even so, an absence of observed on-page abuse does not offset a confirmed blacklisting. The site is unsuitable for any login, credential entry or financial interaction.

Evidence
  • Homepage: served a suspected-phishing interstitial with an access-denied response, so the real content was withheld.
  • Threat intelligence: three detection engines flagged the domain as malicious and one as suspicious, with an additional external blacklist listing.
  • Domain provenance: registered 2026-07-12 (~0.29 years old), expiring 2027-07-12.
  • Behaviour testing (3 successful runs): 25 external XHR requests and 9 external POSTs, all to recognised destinations. There were 20 console errors, and no wallet, clipboard or hidden-form abuse.

Regulatory Verification Notes

No legal, terms, about or licensing page was reachable. The site therefore presents no operating entity, registration number or regulatory licence. Identity could not be independently tied to a real-world person or company. No third-party broker or regulatory-database entry matched the domain, so that absence is neutral and not a clearance. Technical hygiene is basic and does not contradict the blacklisting. The site has a valid, DV-level certificate and uses a mainstream registrar. These facts show only that the site is technically functional. They do not show a legitimate operator, because a malicious site can obtain the same certificate and registration.

Evidence
  • Transport security: TLS certificate issued by WE1 (DV), valid to 2026-12-08, with about 42 days remaining.
  • Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
  • Registration: registrar PDR Ltd. d/b/a PublicDomainRegistry.com, with registrant details masked.
  • Legal pages: no entity name, licence or registration reference was available on any reachable page.

What to Verify Next

Any prospective interaction should begin with independent confirmation that this domain belongs to a known, legitimate organisation. Verification should come from a source other than the site itself, such as a trusted official channel the organisation published before this domain appeared. If a regulated activity is claimed, the claim should be checked in the relevant national regulator's registry. Anyone who reached the site through an unsolicited message, advertisement or social-media link should treat that referral as suspect and report it to the sender platform. Official support and contact channels should be confirmed offline.

Evidence
  • Provenance: the domain's registration is only a few months old, so no long operating history can corroborate any claimed organisation.
  • Reputation: independent warnings were active at the time of analysis, so a fresh re-check of the listings is worthwhile before any decision.
  • Homepage: no identifiable operator or regulated-activity claim could be reached, so an external registry is the only available route.

Summary Verdict

The overall posture is high-risk. Confirmed blacklisting and a suspected-phishing warning on the landing page outweigh the site's ordinary technical hygiene. The domain's recent creation and the absence of any verifiable operator reinforce that assessment. The evidence supports a clearly cautionary stance, not a neutral one.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host was not observable. This protection is a mitigating factor only and cannot offset the reputational findings. It also prevents independent confirmation of where the content is hosted. Bot-protection challenges blocked the automated visit, and the edge layer can mask rapid content changes behind the same address.

Closing Assessment

The site should not be used for login, credential entry, payments or any financial interaction, and nothing should be downloaded from it. Passive viewing at most is the limit, ideally from an isolated environment. Anyone who has already entered credentials or sent funds should change affected passwords and contact their bank or payment provider promptly.

Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network.

01 External reputation

  • Several malware engines flagged this domain.External reputation rule:EXT_BLACKLIST_HIGH

02 Behaviour in a sandbox

  • Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox rule:BEHAV_EXTERNAL_RATIO_HIGH
  • The page produced an unusually high number of errors while it ran.Behaviour in a sandbox rule:BEHAV_CONSOLE_ERRORS_HIGH
  • The page made many background requests to other domains while it was open.Behaviour in a sandbox rule:BEHAV_EXTERNAL_XHR_HEAVY
  • The page sent data to other domains many times while it was open.Behaviour in a sandbox rule:BEHAV_EXTERNAL_POSTS_HEAVY

03 Hosting and network

  • The domain was registered between three and six months ago.Hosting and network rule:DNS_YOUNG_6M

Identity verification

StatusUNKNOWN
Identity score50/100
Identity verification confidence30%
  • AI page analysis unavailable (page captured; identity not AI-verified)

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of projectsvexs.com.

  • The request stayed on projectsvexs.com. It was not redirected to another domain. Clear
  • Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. Clear
  • DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
  • The registration is paid up to 2027-07-12. Noted
  • It is hosted on CLOUDFLARENET, from a server in US. Noted

Domain intelligence

RegistrarPDR Ltd. d/b/a PublicDomainRegistry.com
HostingCLOUDFLARENET - Cloudflare, Inc., US
CountryUS
Server IP2606:4700:3037::ac43:a4fe
Name serversALEXIS.NS.CLOUDFLARE.COM, JOURNEY.NS.CLOUDFLARE.COM
CDN / edge networkDetected (cloudflare)
Resolved IP addresses4
Edge IP addresses4
Likely origin IP addresses0
SSL issuerWE1
SSL expiry2026-12-08
Domain age0.29 years (continuous registration)
Domain expiry2027-07-12
Archive first seenNot available
Archive snapshotsNot counted (archive lookup incomplete)
ReputationVirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about projectsvexs.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about projectsvexs.com

Is projectsvexs.com a scam?

TrustSniffer's assessment of projectsvexs.com found strong scam indicators. It scored 16 out of 100 on 2026-10-27, which is the critical-risk band. The specific signals are listed in the evidence above.

Is projectsvexs.com safe to use?

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

What is the trust score of projectsvexs.com?

projectsvexs.com scored 16 out of 100 on 2026-10-27, which places it in the critical-risk band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-27 · how we assess · report a mistake