WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Nuclearport.net

Report Date October 9, 2025
Recommendation
Avoid
Overall Summary
Scam
Why we think so

Quick verdict: likely scam. The site returns a default "Welcome to nginx!" page and SimilarWeb shows zero estimated visits (Aug–Sep 2025). WHOIS shows the domain was registered in July 2019 via Amazon Registrar with registrant privacy enabled, and DNS points to AWS nameservers. The site has a valid RapidSSL certificate (expires 2025-11-08), is not flagged by Google Safe Browsing or crypto blacklists, but independent reports (Chargeback pages) describe unauthorized card charges tied to “NuclearPort” subscriptions. Recommendation: avoid transactions, check card statements, and dispute any unexpected charges with your bank.

Confidence Score
18%

Risk Insights

⚠️

User-reported billing complaints

Chargeback and help sites document users disputing "NuclearPort" charges.
If you see an unexpected NuclearPort charge, treat it as potentially fraudulent and contact your bank right away.
Collect bank records and cancellation attempts before filing disputes.

Contradictory Signals

The domain is technically well-configured (HTTPS, AWS DNS), yet it lacks public content while appearing in billing complaints — this combination often appears when billing descriptors are used by backend processors while the public site is inactive.

Signal A: Valid SSL certificate and AWS hosting (technical hygiene)

Signal B: Default nginx page, zero traffic, and multiple chargeback reports (bad reputation / no active site)

Category Scores

Identity 20/100
Reputation 15/100
Technical 50/100
Content 5/100
Legal 30/100
Business Validity 10/100

Red Flags & Warnings

  • User-reported unauthorized charges and active chargeback discussion pages tied to "NuclearPort."
  • Site serves an nginx default page (no product, no checkout flow visible), suggesting an inactive or placeholder site that still appears on statements.
  • WHOIS uses an identity-protection service; registrant details are masked and contact info points to a generic PO Box in the UK.
  • No reliable traffic or engagement data (SimilarWeb shows zero visits), inconsistent with a legitimate merchant collecting recurring payments.

🔎 Detailed Checks & Analysis

WHOIS: registration age & privacy

Score: 20/100
Failed

"An older creation date (2019) by itself is neutral-to-slightly-positive, but the use of a paid privacy/identity-protection proxy (PO Box in Hayes, UK) removes clear operator identity and contact details, which lowers trust."

Reason: Domain registered in 2019 but uses an identity protection service that hides the operator.

Site content: front page and visible product info

Score: 50/100
Failed

"The domain displays a generic "Welcome to nginx!" placeholder instead of product pages, contact forms, or checkout screens; that mismatch with reported billing descriptors raises suspicion."

Reason: Front page returns a default nginx message with no product, pricing or clear checkout flow.

Traffic & engagement (SimilarWeb)

Score: 10/100
Failed

"SimilarWeb shows 0 visits for Aug–Sep 2025 and no rank data; legitimate merchants typically show measurable traffic or referral sources."

Reason: Estimated monthly visits are zero in recent snapshots, inconsistent with an active merchant.

Contact information and transparency

Score: 10/100
Failed

"A legitimate merchant usually exposes at least an email, business address, or clear support channel on its site; here those are missing or non-specific."

Reason: Automated scraping found no email addresses and only one phone number from a third‑party scrape; no verified business profile on the site.

SSL / Transport security

Score: 50/100
Passed

"HTTPS and a valid certificate protect data-in-transit, but TLS presence does not confirm business legitimacy; treat as a hygiene-positive signal."

Reason: Valid RapidSSL wildcard certificate is in place (valid through 2025-11-08).

Blacklist & safe-browsing checks

Score: 40/100
Passed

"Public blocklists did not flag the domain in the collected data; absence from blocklists reduces some immediate risk signals but does not rule out fraud reported through chargebacks."

Reason: No matches found in Google Safe Browsing and crypto-scam blacklist queries returned negative.

Trademark / brand legitimacy (USPTO)

Score: 30/100
Passed

"No matching federal trademarks were located; this neither proves nor disproves legitimacy but means no official trademark claim was found in the USPTO samples searched."

Reason: No USPTO trademarks found for the queried name.

User reports & reputation (public complaints)

Score: 15/100
Failed

"Independent consumer-help pages and chargeback guides reference NuclearPort subscription descriptors and how to cancel or dispute them; such patterns are common with billing-related scams."

Reason: Chargeback/help pages show users disputing charges labeled as "NuclearPort" or similar, suggesting real-money complaints exist.

Technical DNS infrastructure

Score: 55/100
Passed

"Use of AWS nameservers shows the site is hosted on mainstream infrastructure; that reduces the likelihood of ephemeral throwaway hosting but doesn't confirm business legitimacy."

Reason: DNS points to Amazon/AWS nameservers, which is common and technically sound.

Your Next Steps

  • 1
    Do not provide payment details or click payment links on nuclearport.net; avoid any new subscriptions.
  • 2
    If you see a charge labeled "NuclearPort" on your card, contact your card issuer immediately to dispute the charge and request a chargeback.
  • 3
    Collect evidence (screenshots of charges, bank statement lines, any emails) and consider using a chargeback/consumer-help service if your issuer is uncooperative.
  • 4
    Report the incident to your local consumer protection agency (e.g., FTC in the U.S.) and file a complaint with your card network if applicable.
  • 5
    If you manage IT for your organization, block traffic to nuclearport.net and monitor for similar suspicious domains or recurring merchant descriptors.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →