Is zcat.world a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, branded "ZCAT — Anonymous Cat", is a very recently launched single-page property. Its homepage carries only a short block of text under that title. The captured content gives no clear description of a product, service, or business model, so its apparent purpose is an anonymity-themed brand with an undefined offering.

Scam/Impersonation Risk

Confirmed contradictory signals are present, and they are decisive. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, and an external blacklist listing is confirmed. That listing is sufficient to place the site in an elevated-risk category regardless of its other characteristics. The registration is only weeks old, so the site has no operating track record to counter the detections. Its registrar is NICENIC International Group. The homepage's behavior adds mild corroborating context: during interaction testing, most network activity was directed to external destinations, and the page performed a clipboard write. No wallet-connection, drainer, or clipboard-hijack behavior was observed, and no cloaking was detected. These observations do not by themselves show malicious intent, but they do not offset the blacklist. No conflicting legal entities were found, so no identity contradiction exists. The domain name is also visually close to a well-known messaging brand, which is an unconfirmed lookalike heuristic only. Because the site describes no concrete offering, the nature of the harm the detections relate to cannot be established from its content. Evidence:

• Homepage and domain reputation: the site is blacklisted by multiple independent threat-intelligence engines, and the aggregate detection level is high enough to trigger a mandatory external-threat override.
• Domain provenance: registered 2026-09-06 (~0.13 years, about 46 days old) through NICENIC International Group Co., Limited; registration expires 2027-09-06.
• Web-archive depth: 3 archive snapshots, all in 2026 (first seen 2026-09-08, last seen 2026-09-22; 1 year tracked), which is a thin, very recent history.
• Homepage behavior: three successful sandbox runs showed heavy outbound traffic to external hosts and a clipboard write, with no wallet-connect, hidden-form, or cloaking behavior.

Regulatory Verification Notes

The homepage is the only page evaluated. It makes no regulatory claims, names no legal entity, and provides no license, registration, or corporate details. Disclosure is unclear, and the registration record leaves the domain holder's identity incomplete. This is ownership opacity, not an identity contradiction. It is a transparency limitation in its own right, and it also means the operator cannot be independently connected to any real-world person or organization. No third-party broker or regulatory-database entry corresponds to this site, and nothing indicates that it holds any financial or regulatory authorization. A valid transport-encryption certificate is in place, but this is a basic hygiene control and says nothing about the operator's legitimacy. Evidence:

• Homepage: no company name, license number, jurisdiction, or legal terms are visible in the captured text.
• Transport encryption: TLS certificate issued by WE1 (domain-validated only), valid to 2026-12-05, which confirms domain control but not organizational identity.
• Registration record: the holder's identity details are incomplete.
• Third-party registries: no matching broker or regulator record was found.

What to Verify Next

The priority is to establish what, if anything, the site legitimately offers and who operates it, before any interaction beyond viewing. The operator should be identified through an independent route, such as an official announcement from a recognized organization that links to this domain. If the site later presents financial, investment, or token-related claims, the stated authorization should be checked directly with the relevant regulator's public register. The current threat listings should be re-checked later to see whether they are removed. Any contact or support channel should be confirmed through an independent, offline route and not through details published on the site. Evidence:

• Homepage: the text does not describe any product or service that could be assessed against a registry.
• Reputation status: detections are current as of this analysis, and a later removal would be a meaningful change.
• Domain age: the registration is only weeks old, so no established history is available to cross-check.

Summary Verdict

The site carries an elevated-risk posture. Confirmed external blacklisting and a very young, unestablished domain converge into a decisive adverse assessment. No identifiable operator or credible business purpose is available to mitigate it. The positive technical signals present are minor and cannot outweigh the reputation evidence.

Infrastructure Integrity

The site is served through Cloudflare's CDN and WAF (AS13335, US). All four observed addresses are Cloudflare edge servers, and the origin server was not observable. The platform's trusted and well-maintained infrastructure is a mitigating factor in terms of technical hygiene. It also keeps the underlying host from being independently verified, and it can mask rapid content changes. This protection cannot offset the external threat detections.

Closing Assessment

Interaction with this site should be limited to passive viewing at most. No login, credential entry, wallet connection, payment, or financial transaction is appropriate, and nothing should be downloaded from it. Organizations should consider blocking the domain at the network level unless a trustworthy source independently vouches for it.