Is watched.cx safe?
http://watched.cx/
Checked on
How we checked
Coverage: strong · 4 of 6 applicable core capabilities
- Antivirus (57 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading · limited: did not fully complete
- page capture: completed
- domain records: completed
- web research: completed
An 11-day-old streaming portal with no named operator, no visible terms or pricing, and a login served over unencrypted HTTP
watched.cx is a video streaming site offering Movies, Shows, Anime and Live TV, with a hero film and a PLAY button, plus Sign in and Sign up account actions. Nothing on the rendered page names who runs it, and no pricing, terms, refund policy or company details are visible. The domain is only 11 days old, and the address we scanned was served over plain HTTP with no redirect to HTTPS. No malware, phishing or blocklist detections were recorded and the browsing session showed no popups, downloads or ad-network requests, so the score reflects an unverified, anonymous operator rather than a demonstrated attack.
Saved site captureCaptured safely during this scanSaved antivirus result from Nov 4, 2026: no detections across 57 enginesWhere this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 58/100
Moderate Risk covers scores 45–69. 3 findings pulled the score down; 1 pushed it up.
What pulled the score down
- ModerateA valid TLS certificate exists, but the scanned address was served over plain HTTP with no redirect to HTTPS, leaving the sign-in and sign-up forms unencrypted.-28 pts
- MinorThe registrable domain is 11 days old, so there is no operating history to assess.
- MinorNo company name, registration, contact email, phone, address or terms are visible on the rendered page, and the script-built page's contact details were not reviewed.
What pushed the score up
- SupportsThe browser threat feed returned no threat warning and the hosting IP has an abuse confidence score of 0/100.
Points come from the saved evidence ledger: it lowered the score from 86 to 58 and split those 28 points between the findings that show points; the others carry no points in the ledger.
01 · Investigation Brief
Investigation Brief
watched.cx is a video streaming site offering Movies, Shows, Anime and Live TV, with a hero film and a PLAY button, plus Sign in and Sign up account actions. Nothing on the rendered page names who runs it, and no pricing, terms, refund policy or company details are visible. The domain is only 11 days old, and the address we scanned was served over plain HTTP with no redirect to HTTPS. No malware, phishing or blocklist detections were recorded and the browsing session showed no popups, downloads or ad-network requests, so the score reflects an unverified, anonymous operator rather than a demonstrated attack.
A streaming catalogue with account sign-up and no visible business details
The landing page is a streaming front end: navigation for Home, Movies, Shows, Anime and Live TV, a hero promotion for the film PRIMETIME with a PLAY button, and a Top rated row of third-party film posters. The only conversion actions are Sign in and Sign up, which point to same-site account pages; no price, plan, payment logo or subscription offer appears on the captured page.
No company name, registration number, contact email, phone, address or terms are visible anywhere on the rendered page, and the page builds its content with scripts, so its own contact details were not visible to our page reader and were not reviewed. Independent search results only surface a promotional social post describing the service and a forum thread asking for a modified version of the app; neither identifies an operator or an established track record.
The registrable domain is 11 days old, so there is no operating history to weigh and no independent review record tied to this host. A Cloudflare human-verification widget sits over the page, which is ordinary bot protection and says nothing about who is behind the site.
Clean technical checks, unresolved operator risk
Technical checks came back clean: the browser threat feed returned no threat warning, the hosting IP carries an abuse confidence score of 0/100, and a valid TLS certificate exists for the host. The browser probe of the PLAY control produced a same-site navigation to a movie page with no popups, file downloads or ad-network hosts observed, and the only off-domain references are TMDB artwork and a Discord invite, neither of which is a merchant or payment destination.
The one concrete technical weakness is transport: despite the valid certificate, the scanned address was served over plain HTTP with no redirect to HTTPS, so the connection to it was not encrypted. That matters most for the Sign in and Sign up forms, where a password would travel unprotected.
Operator risk is unresolved rather than proven. The site is anonymous and days old, offers a large catalogue of third-party film artwork with no visible licensing, pricing or terms, and we found no user reports, charges, subscription mechanics or refund behaviour for this host. Nothing here confirms a specific consumer-harm mechanic, which is why the score sits in the moderate band rather than the high-risk one.
Why the score is 58
A valid TLS certificate exists, but the scanned address was served over plain HTTP with no redirect to HTTPS, leaving the sign-in and sign-up forms unencrypted.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 93
No detectionsSaved analysis from November 4, 2026 - stale
No detections across 57 engines that rated this URL
No antivirus engine that answered raised an adverse result; 36 had no rating for this URL. This is one signal, not a guarantee.
- Malicious
- 0
- Suspicious
- 0
- Total
- 93
All 93 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Googlemedia_and_entertainment
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
Header shows the wordmark 'watched' with navigation Home, Movies, Shows, Anime, Live TV, a search icon, a settings gear, a Discord icon, and 'Sign in' / 'Sign up' buttons. Hero section promotes the film 'PRIMETIME' (6.8 rating, 2026, Thriller) with a synopsis and a prominent 'PLAY' button plus add-to-list and info buttons. A 'Top rated' row displays movie posters including Batman, a fantasy creature title and others, indicating a catalogue of third-party film artwork. A Cloudflare 'Verify you are human' checkbox widget is overlaid at the bottom right of the page. No pricing, subscription plan, payment logos, terms, refund policy, company name or contact information is visible anywhere on the rendered page.
What the captured page showed
5 observations- 01
Header shows the wordmark 'watched' with navigation Home, Movies, Shows, Anime, Live TV, a search icon, a settings gear, a Discord icon, and 'Sign in' / 'Sign up' buttons.
- 02
Hero section promotes the film 'PRIMETIME' (6.8 rating, 2026, Thriller) with a synopsis and a prominent 'PLAY' button plus add-to-list and info buttons.
- 03
A 'Top rated' row displays movie posters including Batman, a fantasy creature title and others, indicating a catalogue of third-party film artwork.
- 04
A Cloudflare 'Verify you are human' checkbox widget is overlaid at the bottom right of the page.
- 05
No pricing, subscription plan, payment logos, terms, refund policy, company name or contact information is visible anywhere on the rendered page.
What the page says about itself
Quoted from the pages we read: the site's own words, not our findings.
- Page title
Home · watched
- Meta description
Movies, Shows, Anime, Live TV ready to be watched
Pages we read
- Main page/homeRead
03 · Investigation Story
Investigation story
What the site claims
Home · watched
What we observed
The page content was captured and checked alongside 57 antivirus results.
What independent research found
3 external findings were saved and compared with the page evidence.
What remains unverified
2 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Streaming Piracy
Observed behavior
Evidence behind this classification
- 01The registrable domain is 11 days old, so there is no operating history to assess.
- 02No company name, registration, contact email, phone, address or terms are visible on the rendered page, and the script-built page's contact details were not reviewed.
- 03A valid TLS certificate exists, but the scanned address was served over plain HTTP with no redirect to HTTPS, leaving the sign-in and sign-up forms unencrypted.
Web research findings
Independent findings for watched.cx, including public complaints, named review sources, registration records, and look-alike-domain evidence.
No independently sourced scam reports or credibility records were found for watched.cx. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domainwatched.cx
- Redirects towatched.cx
- Hosted byCloudflare, Inc.
- Referencesdiscord.gg · image.tmdb.org
Domain Timeline
- Oct 25, 2026Domain registered
First appeared in WHOIS records — 11 days old when this review was saved.
- Nov 5, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
watched.cx was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.
Certificate issued for watched.cx.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1307http://watched.cx/
- 2200http://watched.cx/home
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentpartial
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
A valid TLS certificate exists, but the scanned address was served over plain HTTP with no redirect to HTTPS, leaving the sign-in and sign-up forms unencrypted.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
A valid TLS certificate exists, but the scanned address was served over plain HTTP with no redirect to HTTPS, leaving the sign-in and sign-up forms unencrypted. · The registrable domain is 11 days old, so there is no operating history to assess.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 93 engines flagged | Limited | No saved finding | stale fallback · analysed Nov 4, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 5, 2026 |
| Page content | Page fetched · HTTP 200 | Limited | No saved finding | this scan · Nov 5, 2026 |
| Visual evidence | 5 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 5, 2026 |
| Independent research | 3 independent findings were saved | Completed | No adverse finding | this scan · Nov 5, 2026 |
- Antivirus
- Result0 of 93 engines flagged
- CompletionLimitedFindingNo saved finding
- Freshnessstale fallback · analysed Nov 4, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionLimitedFindingNo saved finding
- Freshnessthis scan · Nov 5, 2026
- Visual evidence
- Result5 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
- Independent research
- Result3 independent findings were saved
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is watched.cx a scam or is it safe?
Is watched.cx safe to use?
Has watched.cx been flagged by antivirus engines?
Is watched.cx on any phishing or malware blacklists?
How old is the watched.cx domain?
Does watched.cx have a valid SSL certificate?
Where is watched.cx hosted?
How often is the watched.cx report updated?
08 · Final Verdict
Final verdict
An 11-day-old streaming portal with no named operator, no visible terms or pricing, and a login served over unencrypted HTTP
watched.cx is a video streaming site offering Movies, Shows, Anime and Live TV, with a hero film and a PLAY button, plus Sign in and Sign up account actions. Nothing on the rendered page names who runs it, and no pricing, terms, refund policy or company details are visible. The domain is only 11 days old, and the address we scanned was served over plain HTTP with no redirect to HTTPS. No malware, phishing or blocklist detections were recorded and the browsing session showed no popups, downloads or ad-network requests, so the score reflects an unverified, anonymous operator rather than a demonstrated attack.
09 · Community
Community
Are you the owner of watched.cx?Verify and reply