WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Extramile-cy.com

Report Date October 7, 2025
Recommendation
Caution
Overall Summary
Suspicious
Why we think so

Quick verdict: ⚠️ Suspicious. The domain is young (registered 2023) and uses privacy-protected WHOIS, but it publishes working contact emails and social links. App-store reviews and user reports link the brand to unauthorized or persistent charges. Technical signals (valid SSL, AWS-hosted DNS, SPF) look normal and Google Safe Browsing shows no block, so evidence is mixed. Treat transactions and sign-ups cautiously and gather payment evidence before contesting charges.

Confidence Score
43%

Risk Insights

⚠️

User-reported billing problems

App-store reviews mention unauthorized or persistent charges tied to services linked with this site.
Several community chargeback guides reference extramile-cy.com as a disputed descriptor.
Collect payment records before contacting your bank to dispute charges.
🛡️

Technically normal but opaque ownership

Valid SSL and AWS hosting indicate standard technical setup.
WHOIS is privacy-protected and registrar is Namecheap, limiting owner transparency.
No blacklist hits were found, so the risk is operational/financial rather than malware-based.

Contradictory Signals

Absence from technical blacklists shows no known malware or phishing, but reputation complaints indicate possible deceptive billing practices that blacklists don't capture.

Signal A: No Google Safe Browsing / blacklist hits

Signal B: Multiple independent user reports of unauthorized charges

Category Scores

Identity 30/100
Reputation 35/100
Technical 70/100
Content 45/100
Legal 50/100
Business Validity 40/100

Red Flags & Warnings

  • User reviews and chargeback pages allege unauthorized charges and poor refund/cancellation processes.
  • Registrant data is privacy-protected (Withheld for Privacy) rather than an identifiable company owner.
  • High proportion of direct traffic (~88.8%) combined with very low global rank can indicate opaque traffic sources or aggressive marketing tactics.

🔎 Detailed Checks & Analysis

WHOIS registrant analysis

Score: 30/100
Failed

"Privacy-protected WHOIS (Withheld for Privacy ehf) is common for legitimate privacy needs but raises identity risk for consumer-facing services; combined with a 2023 creation date, this suggests limited public accountability."

Reason: Registrant uses a privacy service and ownership details are redacted, reducing traceability.

Domain age and registrar

Score: 40/100
Failed

"Younger domains can be legitimate startups but also correlate with short-lived scam operations; absence of long-term history lowers trust."

Reason: Domain registered in April 2023 — relatively young for a stable consumer brand.

Technical hygiene (SSL, DNS, SPF)

Score: 70/100
Passed

"Certificate valid through 2026 and multiple A/AAAA records on AWS suggest standard hosting; SPF includes mail.zendesk.com which aligns with common support tooling."

Reason: Valid SSL, AWS-hosted DNS, and SPF including Google and Zendesk indicate reasonable technical setup.

Traffic & engagement signals

Score: 35/100
Failed

"Visits rose to ~1,518 in Aug 2025 from lower levels; direct traffic ~88.8% often indicates opaque acquisition (email, deep-links, or redirects) rather than organic discovery."

Reason: Very low global rank and small absolute traffic, but a recent spike and high direct traffic share are unusual and warrant caution.

Reputation & user reports

Score: 25/100
Failed

"App-store reviews and chargeback-advice pages specifically reference extramile-cy.com in the context of disputed charges; although not confirmed by authoritative regulators, these are credible consumer reports that matter for payment risk."

Reason: Multiple user complaints about unauthorized charges, refunds, and difficulty cancelling raise serious reputation concerns.

Blacklist and phishing checks

Score: 70/100
Passed

"Absence from major blacklists reduces certainty of active widespread malware or phishing, but does not rule out fraudulent business practices."

Reason: No Google Safe Browsing matches and crypto-scam scanners did not flag the domain.

Trademark / brand impersonation

Score: 60/100
Passed

"USPTO search returned no results for the query; separate Google Places entries for 'ExtraMile' appear unrelated but could mislead users searching the name."

Reason: No USPTO-trademark hits for the queried term, but similar public business names exist (ExtraMile convenience stores) which can cause consumer confusion.

Contactability and support channels

Score: 55/100
Passed

"Presence of support@ and info@ addresses and social accounts is a positive sign for traceability, but real-world responsiveness and refund policy clarity remain unverified."

Reason: Site lists support and info emails plus social links, which helps escalation and evidence-gathering.

Your Next Steps

  • 1
    If you were charged unexpectedly, collect receipts, screenshots, and any email/chat records and contact your card issuer to start a dispute.
  • 2
    Try contacting the listed support emails (support@extramile-cy.com and info@extramile-cy.com); keep copies of all correspondence.
  • 3
    Search app-store pages, chargeback-advice posts, and scam trackers for matching complaints before providing payment details.
  • 4
    Avoid subscribing or giving payment info until you can verify a refundable, documented policy and acceptable user feedback.
  • 5
    If you already paid and can’t get a refund, report to your local consumer protection agency and file a complaint with your payment provider.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →