---
title: "Is xspectarvault.info a Scam? Trust Score 12/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "xspectarvault.info"
verdict: "Critical Risk"
title: "Is xspectarvault.info a Scam? Risk Report, Score 12/100"
trust_score: 12
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/xspectarvault.info
assessed: 2026-10-22
---

# Is xspectarvault.info a scam? TrustSniffer's high-risk assessment: 12/100

## Verdict


**Verdict: Critical Risk, trust score 12/100.** xspectarvault.info shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 3 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 7 days old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (3 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by YE2) | Noted |

## The page as captured


![Screenshot of the xspectarvault.info homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/xspectarvault.info/screenshots/first.png)

_What xspectarvault.info served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

xSPECTAR (xspectarvault.info) is a newly registered website whose homepage carries the title "xSPECTAR — Allocation Live". That wording suggests a launch or allocation-style offering, but the captured page text does not give an independently confirmed description of what is sold or promised. It presents itself through a single landing page, and its business model and operator cannot be established from the available material.


### Scam/Impersonation Risk

Contradictory signals are present and severe. The domain is **blacklisted**. A tier-one security vendor flags it, and several further reputation engines return malicious or suspicious detections, so the listing is corroborated across independent sources. The detections do not specify the threat category. No brand impersonation and no conflicting legal identities were observed. The risk therefore rests on the external listing and on the profile of the domain. It is a days-old registration with almost no history, and the web archive holds only a handful of recent captures. This is the pattern typical of short-lived, disposable campaign domains. Browser-behaviour testing adds a secondary concern. A large majority of the homepage's network traffic went to third-party origins, including multiple outbound POST requests and some console errors across the test runs. None of these destinations were unrecognised, and no wallet-connection prompts, clipboard manipulation, hidden forms, cloaking or credential posts to external hosts were seen. The traffic pattern is therefore a risk-amplifying signal and not a confirmed attack mechanism. Evidence:

- Homepage reputation check: multiple independent engines flag the domain as malicious or suspicious, including one tier-one vendor.
- Domain provenance: registered 2026-10-12 (~0.02 years old, about nine days at assessment), with expiry set one year out to 2027-10-12.
- Web archive: 3 snapshots, spanning 2026-10-13 to 2026-10-20 (1 year tracked), which shows no meaningful prior history.
- Homepage behaviour testing: 3 of 3 runs completed; 15 of 24 responses (about 63%) were external, with 6 external POSTs and 3 console errors, and no wallet, clipboard or cloaking activity.

### Regulatory Verification Notes

The homepage, the only page captured, offers no verifiable operator identity, licensing status or registration number. The on-page disclosure position is unclear and the site's governance is opaque. The site's ownership details are likewise incomplete, so ownership opacity applies. This is an administrative limitation and not an identity contradiction. Nothing in the evidence connects the site to a recognised real-world company or person. No third-party broker or regulator record matched the site, so no external reputational context exists to offset the security detections. The transport encryption is valid but is only domain-validated. It confirms an encrypted connection, not who operates the site, and it carries no weight as a legitimacy signal. Evidence:

- Homepage: no identifiable company name, licence or registration information is presented to the visitor.
- Domain registration: registered through NICENIC International Group Co., Limited, with owner details incomplete.
- Transport security: TLS certificate issued by YE2 (DV), valid to 2027-01-10.
- Hosting: served from AS13335 (Cloudflare, Inc., US).

### What to Verify Next

Before any engagement, the operator's identity should be established through channels independent of the site. Any claim of authorisation or licensing should be checked directly in the relevant regulator's public register, not through links or documents the site supplies. Official contact channels and any associated social or app presence should be confirmed through an independent route. Whatever "allocation" the homepage advertises should be assessed against independent coverage, not the site's own statements. Re-testing after the security listings have been reviewed or delisted would show whether the reputation picture has changed. Evidence:

- Homepage: the "Allocation Live" title is the only offering signal, and no terms, risk disclosures or operator details accompany it.
- Domain history: only a very recent registration and archive footprint exist, so there is no track record to cite.
- External reputation: detections across several engines remain unresolved and unspecified in category.

### Summary Verdict

The site carries an elevated risk posture. Corroborated security listings, a very recent registration with no operating history, and an operator who cannot be identified outweigh the neutral technical signals. The valid certificate and the absence of overt on-page attack behaviour do not offset these concerns, and the site cannot be treated as trustworthy.


### Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF. All observed addresses are edge servers, and the origin server is not visible. This is mitigating at most. Edge-only visibility prevents independent hosting verification and can mask rapid content swaps. The infrastructure is also shared by a very large number of unrelated sites, so it says nothing about this operator. Its protections do not offset the reputation risk.


### Closing Assessment

Interaction should be limited to read-only viewing, if the site is visited at all. Accounts, credentials, wallet connections, payments and file downloads should be avoided, and the site should be re-assessed only after the security listings are cleared and the operator is independently identified.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### 03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page sent data to other domains many times while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_POSTS_HEAVY`)

### 05 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of xspectarvault.info.

- The request stayed on xspectarvault.info. It was not redirected to another domain. (Clear)
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-10-12. (Noted)
- The earliest public archive of this site is from 2026-10-13. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::ac43:ac0f |
| Name servers | aria.ns.cloudflare.com, rajeev.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2027-01-10 |
| Domain age | 0.02 years (continuous registration) |
| Domain expiry | 2027-10-12 |
| Archive first seen | 2026-10-13 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about xspectarvault.info at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [anzaskr.info](https://trustsniffer.com/report/anzaskr.info), another .info site assessed as critical-risk (Critical Risk, 0/100)
- [rewards-availproject.info](https://trustsniffer.com/report/rewards-availproject.info), another .info site assessed as critical-risk (Critical Risk, 1/100)
- [snublab.info](https://trustsniffer.com/report/snublab.info), another .info site assessed as critical-risk (Critical Risk, 0/100)
- [voters-etherfi.info](https://trustsniffer.com/report/voters-etherfi.info), another .info site assessed as critical-risk (Critical Risk, 0/100)
- [remittixpresale.info](https://trustsniffer.com/report/remittixpresale.info), another .info site assessed as critical-risk (Critical Risk, 0/100)
- [rtxtoken.info](https://trustsniffer.com/report/rtxtoken.info), another .info site assessed as critical-risk (Critical Risk, 0/100)
- [xalienslabs.info](https://trustsniffer.com/report/xalienslabs.info), another .info site assessed as critical-risk (Critical Risk, 0/100)
- [girinlabs.info](https://trustsniffer.com/report/girinlabs.info), another .info site assessed as critical-risk (Critical Risk, 0/100)
- [transfarusdttbep20.netlify.app](https://trustsniffer.com/report/transfarusdttbep20.netlify.app), another site assessed as critical-risk (Critical Risk, 5/100)
- [darkcarderdrainer.netlify.app](https://trustsniffer.com/report/darkcarderdrainer.netlify.app), another site assessed as critical-risk (Critical Risk, 5/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/xspectarvault.info) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/xspectarvault.info · assessed 2026-10-22.*