Is whalespacerev.live a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website at the domain root, titled "blockchain", that presents a short block of blockchain-themed text. The captured content does not establish a clear product, service or operator. Its apparent purpose is to attract visitors under a generic crypto-sector label, and the available evidence does not show it to be a recognizable, established business.

Scam/Impersonation Risk

Contradictory signals are present, and they are serious. The domain is on an external blacklist, and several independent security engines classify it as malicious. These include at least one top-tier network-security vendor, so the detections are not an isolated or low-confidence outlier. The available data does not specify the exact abuse category, so this report does not assign one. The domain was registered only days before the assessment and has almost no archived history. That profile is typical of disposable or rapidly deployed infrastructure, and it removes any record of legitimate prior use that could offset the detections. No conflicting legal entities or named-brand impersonation were observed on the page. The risk rests on the blacklist and detection evidence, not on identity inconsistency. During controlled browsing sessions the page made no external calls, attempted no wallet interactions, showed no clipboard manipulation and did not cloak its content. That is a neutral behavioral observation and does not offset the external listings. Evidence:

• Homepage: the domain appears on an external blacklist, and multiple security engines flag it as malicious, including one top-tier vendor.
• Domain registration: created 2026-10-08, about 0.04 years (roughly two weeks) old at assessment.
• Web archive: 3 snapshots, spanning 2026-10-09 to 2026-10-12, which is under one year tracked.
• Homepage behavior: three successful browsing runs recorded no external requests, wallet-drainer behavior or hidden forms.

Regulatory Verification Notes

The homepage carries no identifiable legal-entity name, licensing statement, registration number or accountable contact. Disclosure is unclear, and the ownership details attached to the domain are incomplete. This is ownership opacity, not an identity contradiction. The absence of licensing information is a verification gap in its own right. In this case it sits alongside confirmed adverse reputation signals and therefore carries more weight. No third-party broker or regulatory-database profile matched the site, so there is no external regulatory context to rely on. The page uses a valid but entry-level domain-validated certificate, which confirms encrypted transport only. It says nothing about who operates the site. Evidence:

• Homepage: no company name, licence, registration number or accountable contact is presented.
• Registration record: registrar is OwnRegistrar, Inc.; registered 2026-10-08, expiring 2027-10-08; owner details are incomplete.
• Transport encryption: TLS certificate issued by YE2 (DV), valid to 2027-01-06.
• Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).

What to Verify Next

Any claim of operator identity must be established independently, outside the site. Confirm the operating entity through official company or financial-regulator registries, and do not rely on anything the page asserts. Confirm that any organization the page may reference actually endorses this domain, using its officially published channels reached through an independent route. Ask the party that referred the domain to explain how it was obtained. Treat any approach to connect a wallet, deposit funds, or share credentials via this domain as unverified until the above checks succeed. Evidence:

• Homepage: no verifiable operator, regulator or registration reference is available to check against.
• Domain history: the domain is only days old, so no track record exists to corroborate the site.
• External reputation: the blacklist and multi-engine detections remain unresolved and should be rechecked before any reassessment.

Summary Verdict

The site carries a high-risk posture. Confirmed external blacklisting and multiple malicious detections are decisive, and a negligible operating history and unestablished operator identity give them no counterweight. Neither the technical hygiene nor the benign browsing behavior is enough to offset that reputation damage.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN/WAF, and all four observed addresses are edge nodes on AS13335 in the US. No origin server was visible, which prevents independent hosting verification. The valid certificate is a minor mitigating factor, but this arrangement is common to legitimate and malicious sites alike. It cannot offset the reputation findings, and it makes rapid content changes harder to observe.

Closing Assessment

Treat the site as unsafe for login, credential entry, wallet connection or any financial interaction. Limit contact to non-interactive viewing only, and preferably avoid the domain altogether until the external detections are cleared and the operator is independently verified.