WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Scamai.com

Report Date October 8, 2025
Recommendation
Caution
Overall Summary
Suspicious
Why we think so

Quick verdict: ⚠️ Suspicious. The domain is registered in 2019, uses a valid SSL certificate and is not flagged on major blacklists, but it shows effectively zero traffic, no public contact email, and the WHOIS record is privacy-protected. Those gaps reduce trust — verify ownership and contact channels before relying on the site.

Confidence Score
53%

Risk Insights

⚠️

Low observed traffic

SimilarWeb shows ~0 monthly visits (snapshot 2025-09-01).
Low traffic means fewer independent reviews and signals to judge trustworthiness.
🛡️

WHOIS privacy

Registrant is privacy-protected via Anonymize LLC (Epik registrar).
Ask for verifiable business registration or documentation before transacting.

Contradictory Signals

Technical signals show active site management, but lack of traffic and contactability weaken trust; reason to verify ownership.

Signal A: Valid SSL and verification TXT records

Signal B: No traffic and no public contact emails

Category Scores

Identity 55/100
Reputation 40/100
Technical 75/100
Content 50/100
Legal 80/100
Business Validity 50/100

Red Flags & Warnings

  • Effectively zero measured traffic and no third‑party reviews or listings, limiting trust signals.
  • WHOIS privacy/proxy prevents confirming the real registrant name and contact details.
  • No public email address found on the site; only a truncated phone entry and social links were discovered.
  • No Google Places listing or trademark entries found for the brand name, so business presence off-site is weak.

🔎 Detailed Checks & Analysis

Domain age & registrar

Score: 70/100
Passed

"Age is a positive signal: the domain has existed since 2019 and is not newly created; registrar is Epik LLC (legitimate commercial registrar)."

Reason: Domain registered in 2019 and active, which is more trustworthy than a freshly created domain.

WHOIS transparency

Score: 40/100
Failed

"Privacy services are common, but they make it harder to verify who runs the site; request direct verification from the operator."

Reason: WHOIS is privacy-protected using Anonymize LLC, so registrant identity is not publicly available.

Traffic & engagement

Score: 25/100
Failed

"Low measured traffic reduces the availability of independent reviews and signals — treat claims on the site with caution until verified."

Reason: SimilarWeb reports zero visits and no traffic sources, so there is little public usage or reputation data.

Contactability

Score: 30/100
Failed

"A legitimate service typically publishes at least one business email and a full phone/address; ask the operator for verifiable contact details."

Reason: No published contact emails and only limited phone/social links were found; contact details are incomplete.

Blacklist / malware checks

Score: 85/100
Passed

"No immediate malware or phishing flags were detected by the supplied blacklist checks, which reduces acute safety concerns."

Reason: No matches in Google Safe Browsing and crypto scam sniffer returned negative for blacklisting.

Trademarks & business listings

Score: 35/100
Failed

"Absence from official registries and map listings means fewer external trust anchors; look for business registration documents."

Reason: No USPTO trademark entries and no Google Places listing were found for the brand.

Site content & external coverage

Score: 45/100
Failed

"Independent reviews, news stories, or complaints help validate a service. Currently, coverage does not establish strong reputation."

Reason: Limited third‑party coverage specific to the domain; news results reference scam topics but not this site.

Your Next Steps

  • 1
    Ask the operator for a business registration number, verifiable company address, and a named contact, then confirm those details independently.
  • 2
    Look up historical WHOIS and DNS records (Archive/WHOIS history) to check ownership continuity and prior domains.
  • 3
    Verify the linked social profiles (Twitter, LinkedIn, GitHub) for consistent posting history and contact info.
  • 4
    Avoid sending money or sensitive data until you confirm identity via multiple signals (official business registry, invoices matching domain, phone verification).
  • 5
    If you suspect fraud, report the domain to your local consumer protection agency and to services like Google Safe Browsing and your registrar's abuse contact.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →