Is xspectarvault.info a scam? TrustSniffer's high-risk assessment: 12/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

xSPECTAR (xspectarvault.info) is a newly registered website whose homepage carries the title "xSPECTAR — Allocation Live". That wording suggests a launch or allocation-style offering, but the captured page text does not give an independently confirmed description of what is sold or promised. It presents itself through a single landing page, and its business model and operator cannot be established from the available material.

Scam/Impersonation Risk

Contradictory signals are present and severe. The domain is blacklisted. A tier-one security vendor flags it, and several further reputation engines return malicious or suspicious detections, so the listing is corroborated across independent sources. The detections do not specify the threat category. No brand impersonation and no conflicting legal identities were observed. The risk therefore rests on the external listing and on the profile of the domain. It is a days-old registration with almost no history, and the web archive holds only a handful of recent captures. This is the pattern typical of short-lived, disposable campaign domains. Browser-behaviour testing adds a secondary concern. A large majority of the homepage's network traffic went to third-party origins, including multiple outbound POST requests and some console errors across the test runs. None of these destinations were unrecognised, and no wallet-connection prompts, clipboard manipulation, hidden forms, cloaking or credential posts to external hosts were seen. The traffic pattern is therefore a risk-amplifying signal and not a confirmed attack mechanism. Evidence:

• Homepage reputation check: multiple independent engines flag the domain as malicious or suspicious, including one tier-one vendor.
• Domain provenance: registered 2026-10-12 (~0.02 years old, about nine days at assessment), with expiry set one year out to 2027-10-12.
• Web archive: 3 snapshots, spanning 2026-10-13 to 2026-10-20 (1 year tracked), which shows no meaningful prior history.
• Homepage behaviour testing: 3 of 3 runs completed; 15 of 24 responses (about 63%) were external, with 6 external POSTs and 3 console errors, and no wallet, clipboard or cloaking activity.

Regulatory Verification Notes

The homepage, the only page captured, offers no verifiable operator identity, licensing status or registration number. The on-page disclosure position is unclear and the site's governance is opaque. The site's ownership details are likewise incomplete, so ownership opacity applies. This is an administrative limitation and not an identity contradiction. Nothing in the evidence connects the site to a recognised real-world company or person. No third-party broker or regulator record matched the site, so no external reputational context exists to offset the security detections. The transport encryption is valid but is only domain-validated. It confirms an encrypted connection, not who operates the site, and it carries no weight as a legitimacy signal. Evidence:

• Homepage: no identifiable company name, licence or registration information is presented to the visitor.
• Domain registration: registered through NICENIC International Group Co., Limited, with owner details incomplete.
• Transport security: TLS certificate issued by YE2 (DV), valid to 2027-01-10.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the operator's identity should be established through channels independent of the site. Any claim of authorisation or licensing should be checked directly in the relevant regulator's public register, not through links or documents the site supplies. Official contact channels and any associated social or app presence should be confirmed through an independent route. Whatever "allocation" the homepage advertises should be assessed against independent coverage, not the site's own statements. Re-testing after the security listings have been reviewed or delisted would show whether the reputation picture has changed. Evidence:

• Homepage: the "Allocation Live" title is the only offering signal, and no terms, risk disclosures or operator details accompany it.
• Domain history: only a very recent registration and archive footprint exist, so there is no track record to cite.
• External reputation: detections across several engines remain unresolved and unspecified in category.

Summary Verdict

The site carries an elevated risk posture. Corroborated security listings, a very recent registration with no operating history, and an operator who cannot be identified outweigh the neutral technical signals. The valid certificate and the absence of overt on-page attack behaviour do not offset these concerns, and the site cannot be treated as trustworthy.

Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF. All observed addresses are edge servers, and the origin server is not visible. This is mitigating at most. Edge-only visibility prevents independent hosting verification and can mask rapid content swaps. The infrastructure is also shared by a very large number of unrelated sites, so it says nothing about this operator. Its protections do not offset the reputation risk.

Closing Assessment

Interaction should be limited to read-only viewing, if the site is visited at all. Accounts, credentials, wallet connections, payments and file downloads should be avoided, and the site should be re-assessed only after the security listings are cleared and the operator is independently identified.