---
title: "Is zcat.world a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "zcat.world"
verdict: "Critical Risk"
title: "Is zcat.world a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/zcat.world
assessed: 2026-10-22
---

# Is zcat.world a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** zcat.world shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 13 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 2 months old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (3 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the zcat.world homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/zcat.world/screenshots/first.png)

_What zcat.world served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, branded "ZCAT — Anonymous Cat", is a very recently launched single-page property. Its homepage carries only a short block of text under that title. The captured content gives no clear description of a product, service, or business model, so its apparent purpose is an anonymity-themed brand with an undefined offering.


### Scam/Impersonation Risk

Confirmed contradictory signals are present, and they are decisive. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, and an external blacklist listing is confirmed. That listing is sufficient to place the site in an elevated-risk category regardless of its other characteristics. The registration is only weeks old, so the site has no operating track record to counter the detections. Its registrar is NICENIC International Group. The homepage's behavior adds mild corroborating context: during interaction testing, most network activity was directed to external destinations, and the page performed a clipboard write. No wallet-connection, drainer, or clipboard-hijack behavior was observed, and no cloaking was detected. These observations do not by themselves show malicious intent, but they do not offset the blacklist. No conflicting legal entities were found, so no identity contradiction exists. The domain name is also visually close to a well-known messaging brand, which is an unconfirmed lookalike heuristic only. Because the site describes no concrete offering, the nature of the harm the detections relate to cannot be established from its content. Evidence:

- Homepage and domain reputation: the site is blacklisted by multiple independent threat-intelligence engines, and the aggregate detection level is high enough to trigger a mandatory external-threat override.
- Domain provenance: registered 2026-09-06 (~0.13 years, about 46 days old) through NICENIC International Group Co., Limited; registration expires 2027-09-06.
- Web-archive depth: 3 archive snapshots, all in 2026 (first seen 2026-09-08, last seen 2026-09-22; 1 year tracked), which is a thin, very recent history.
- Homepage behavior: three successful sandbox runs showed heavy outbound traffic to external hosts and a clipboard write, with no wallet-connect, hidden-form, or cloaking behavior.

### Regulatory Verification Notes

The homepage is the only page evaluated. It makes no regulatory claims, names no legal entity, and provides no license, registration, or corporate details. Disclosure is unclear, and the registration record leaves the domain holder's identity incomplete. This is ownership opacity, not an identity contradiction. It is a transparency limitation in its own right, and it also means the operator cannot be independently connected to any real-world person or organization. No third-party broker or regulatory-database entry corresponds to this site, and nothing indicates that it holds any financial or regulatory authorization. A valid transport-encryption certificate is in place, but this is a basic hygiene control and says nothing about the operator's legitimacy. Evidence:

- Homepage: no company name, license number, jurisdiction, or legal terms are visible in the captured text.
- Transport encryption: TLS certificate issued by WE1 (domain-validated only), valid to 2026-12-05, which confirms domain control but not organizational identity.
- Registration record: the holder's identity details are incomplete.
- Third-party registries: no matching broker or regulator record was found.

### What to Verify Next

The priority is to establish what, if anything, the site legitimately offers and who operates it, before any interaction beyond viewing. The operator should be identified through an independent route, such as an official announcement from a recognized organization that links to this domain. If the site later presents financial, investment, or token-related claims, the stated authorization should be checked directly with the relevant regulator's public register. The current threat listings should be re-checked later to see whether they are removed. Any contact or support channel should be confirmed through an independent, offline route and not through details published on the site. Evidence:

- Homepage: the text does not describe any product or service that could be assessed against a registry.
- Reputation status: detections are current as of this analysis, and a later removal would be a meaningful change.
- Domain age: the registration is only weeks old, so no established history is available to cross-check.

### Summary Verdict

The site carries an elevated-risk posture. Confirmed external blacklisting and a very young, unestablished domain converge into a decisive adverse assessment. No identifiable operator or credible business purpose is available to mitigate it. The positive technical signals present are minor and cannot outweigh the reputation evidence.


### Infrastructure Integrity

The site is served through Cloudflare's CDN and WAF (AS13335, US). All four observed addresses are Cloudflare edge servers, and the origin server was not observable. The platform's trusted and well-maintained infrastructure is a mitigating factor in terms of technical hygiene. It also keeps the underlying host from being independently verified, and it can mask rapid content changes. This protection cannot offset the external threat detections.


### Closing Assessment

Interaction with this site should be limited to passive viewing at most. No login, credential entry, wallet connection, payment, or financial transaction is appropriate, and nothing should be downloaded from it. Organizations should consider blocking the domain at the network level unless a trustworthy source independently vouches for it.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### 03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)

### 05 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of zcat.world.

- The request stayed on zcat.world. It was not redirected to another domain. (Clear)
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-09-06. (Noted)
- The earliest public archive of this site is from 2026-09-08. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::6815:3490 |
| Name servers | elle.ns.cloudflare.com, ruben.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-05 |
| Domain age | 0.13 years (continuous registration) |
| Domain expiry | 2027-09-06 |
| Archive first seen | 2026-09-08 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 13 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about zcat.world at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [jup-agf.world](https://trustsniffer.com/report/jup-agf.world), another .world site assessed as critical-risk (Critical Risk, 0/100)
- [raydiumdexnetlify.world](https://trustsniffer.com/report/raydiumdexnetlify.world), another .world site assessed as critical-risk (Critical Risk, 1/100)
- [quest-jimothy.world](https://trustsniffer.com/report/quest-jimothy.world), another .world site assessed as critical-risk (Critical Risk, 0/100)
- [micstndasap.world](https://trustsniffer.com/report/micstndasap.world), another .world site assessed as critical-risk (Critical Risk, 0/100)
- [app-shido-io.pages.dev](https://trustsniffer.com/report/app-shido-io.pages.dev), another site assessed as critical-risk (Critical Risk, 20/100)
- [dbridger.pages.dev](https://trustsniffer.com/report/dbridger.pages.dev), another site assessed as critical-risk (Critical Risk, 0/100)
- [modal-api.pages.dev](https://trustsniffer.com/report/modal-api.pages.dev), another site assessed as critical-risk (Critical Risk, 5/100)
- [quantanuclear.com](https://trustsniffer.com/report/quantanuclear.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [qubeticschain.live](https://trustsniffer.com/report/qubeticschain.live), another site assessed as critical-risk (Critical Risk, 5/100)
- [mxilab.info](https://trustsniffer.com/report/mxilab.info), another site assessed as critical-risk (Critical Risk, 3/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)
- [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses)
- [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/zcat.world) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/zcat.world · assessed 2026-10-22.*