WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Spyx.com

Report Date October 6, 2025
Recommendation
Avoid
Overall Summary
Scam
Why we think so

❌ Verdict: Likely scam / high risk. SpyX is a high-traffic commercial spyware/stalkerware offering parental-monitoring features, but multiple independent news reports, a large data breach (≈2M records), and numerous user complaints about non-delivery and refund refusal create strong fraud and safety signals. The site uses standard technical protections (HTTPS, Cloudflare) and accepts mainstream payments, but those positives don’t outweigh the breach, legal scrutiny, and repeated customer-loss reports.

Confidence Score
25%

Risk Insights

⚠️

Major breach escalates risk

News reports and security sites say ~2 million records were exposed in 2025.
Exposed data reportedly included account credentials for some users.
Breach widens potential harm from an already ethically questionable product.

Contradictory Signals

Strong technical setup suggests a professional operation, but operational and reputational failures (breach, refunds, ethics) outweigh technical positives for end-user safety.

Signal A: Site uses HTTPS, Cloudflare, and mainstream payment processors (technical legitimacy).

Signal B: Large-scale data breach, many fraud/refund complaints, and stalkerware classification (serious reputation/legal risk).

Category Scores

Identity 30/100
Reputation 15/100
Technical 60/100
Content 25/100
Legal 20/100
Business Validity 25/100

Red Flags & Warnings

  • Reported data breach (≈2M records) with exposed account data and email addresses.
  • Widespread user complaints alleging charges for non-working service and difficulty obtaining refunds.
  • Security and ethics concerns: product categorized as stalkerware in several investigative articles.
  • WHOIS ownership details redacted and registrant country listed as China, reducing traceability.
  • No USPTO trademark results for 'spyx.com' query, complicating verification of a legitimate brand owner.

🔎 Detailed Checks & Analysis

Identity (ownership transparency)

Score: 30/100
Failed

"WHOIS shows redacted registrant fields and DNS hosted on Cloudflare; lack of public corporate contact lowers identity trust."

Reason: Ownership and registrant contact are privacy-redacted and the registrant country is listed as China, which reduces ability to verify the operator.

Reputation (user reviews & press)

Score: 15/100
Failed

"Investigative articles and aggregated user complaints point to repeated billing/refund disputes and distrust on review platforms."

Reason: Multiple independent reviews and user reports allege non-delivery, refund refusal, and label the service fraudulent.

Technical (infrastructure & security)

Score: 60/100
Passed

"Technical stack includes Cloudflare, valid TLS, common payment integrations and analytics; Google Safe Browsing shows no active phishing/malware flags."

Reason: Site uses HTTPS, Cloudflare CDN, and mainstream analytics/ads; SSL certificate is valid — technical defenses are present.

Content (product claims vs reality)

Score: 25/100
Failed

"Independent reviews find missing parental-control features and unreliable monitoring results compared to competitors."

Reason: Product claims (broad social/media monitoring) conflict with reviewer tests that report nonworking features and overpromises.

Legal / compliance

Score: 20/100
Failed

"Press coverage documents breach-related investigations and ethical/legal concerns about misuse and lack of breach notification."

Reason: Service is described as stalkerware in coverage and faces class-action/breach-related investigations, implying legal risk for operators and users.

Business validity (commerce signals)

Score: 25/100
Failed

"Payment processors and traffic indicate a functioning commercial site, but refund/chargeback complaints and legal scrutiny weaken business trust."

Reason: Site accepts major payments and has high traffic, but customer dispute patterns and transparency gaps reduce confidence in long-term business validity.

Your Next Steps

  • 1
    Avoid enrolling, buying, or providing payment information to SpyX until legal/technical issues are resolved.
  • 2
    If you paid and suspect fraud, contact your card issuer immediately and dispute charges; save receipts and communication.
  • 3
    If you or someone you know used SpyX, assume credentials may be exposed — change affected passwords and enable two-factor authentication.
  • 4
    Report the site and its ads to platform hosts (App stores, payment processors, and ad networks) and file a complaint with consumer protection agencies.
  • 5
    For privacy harms (exposed accounts), consider checking HaveIBeenPwned and monitoring credit reports; consult a privacy/legal professional if sensitive data was leaked.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →