WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Umaxapp.com

Report Date October 6, 2025
Recommendation
Caution
Overall Summary
Suspicious
Why we think so

Summary: ⚠️ Suspicious — umaxapp.com is a low-traffic WordPress site (about 2.5K monthly visits) that publishes contact email and social links and uses valid HTTPS and Google Workspace mail. However the domain was registered recently (Oct 2023) with WHOIS privacy enabled, and there are multiple user reports of unexpected subscription charges and billing problems. No Safe Browsing or crypto-blacklist flags were found, but the combination of privacy-protected WHOIS, recent registration, and user charge complaints raises enough concern that you should proceed with caution.

Confidence Score
45%

Risk Insights

⚠️

Charge complaints reported

Community threads and chargeback pages describe unexpected recurring charges.
Users report issues cancelling App Store/Google Play subscriptions tied to Umax.
If you see an unexplained charge, start a bank dispute immediately.
✅

Technical setup looks normal

HTTPS is valid and MX/SPF use Google Workspace.
Site is hosted on Automattic/WordPress infrastructure.
No Safe Browsing or crypto blacklist flags were found.

Contradictory Signals

Technical safety (no malware) conflicts with reputational risk (billing complaints). That means the site may not be delivering promised value rather than actively hosting malware.

Signal A: No malware or blacklist flags found

Signal B: Multiple user complaints about unexpected billing

Category Scores

Identity 40/100
Reputation 45/100
Technical 70/100
Content 50/100
Legal 40/100
Business Validity 45/100

Red Flags & Warnings

  • Registrant uses WHOIS privacy and the domain is relatively new (registered Oct 14, 2023).
  • Several user reports and forum posts describe unexpected or continued subscription charges after cancellation.
  • Low traffic and minimal independent references make it hard to verify claims or read many authentic reviews.
  • No trademark registrations found for the queried brand; potential brand ambiguity.

🔎 Detailed Checks & Analysis

WHOIS / Domain age & ownership

Score: 40/100
Failed

"Privacy redaction is common, but for newer domains it increases risk because there is no public legal contact or clear business owner listed."

Reason: WHOIS is privacy-protected and the domain was registered fairly recently (Oct 14, 2023), reducing verifiable identity signals.

Reputation & user complaints

Score: 45/100
Failed

"These reports are consistent across forums and chargeback sites, but independent authoritative rulings or large-scale scams were not found."

Reason: Multiple forum and consumer posts report unexpected charges and cancellation problems tied to Umax services.

Traffic volume & engagement

Score: 35/100
Failed

"Low traffic limits the quantity and reliability of reviews; small sample sizes can exaggerate single complaints."

Reason: Site traffic is low (~2.5K monthly) and engagement metrics (time on site ≈46s, ~1.56 pages/visit) are weak, giving few third-party signals.

Technical security & infrastructure

Score: 70/100
Passed

"Standard hosting and mail setup lower the chance of credential-based phishing from the domain itself, though they don't guarantee business legitimacy."

Reason: HTTPS is valid, DNS and MX records point to reputable providers (WordPress/Automattic and Google), and SPF is configured.

Contact transparency & social presence

Score: 60/100
Passed

"Having contacts is positive, but responsiveness and written policies (pricing/refunds) should be tested before payments are made."

Reason: Site lists an email, phone number, and multiple social profiles which allow for follow-up and verification.

Blacklist / malware / phishing checks

Score: 80/100
Passed

"No technical malware/phishing flags were detected in the scanned sources; this reduces immediate technical risk."

Reason: No matches on Google Safe Browsing and not flagged by crypto scam lists.

Trademark / legal clarity

Score: 40/100
Failed

"Lack of trademarks doesn't prove fraud, but it reduces legal recourse and increases impersonation risk for small brands."

Reason: No USPTO trademark matches for the queried brand, leaving potential legal/brand ambiguity.

Your Next Steps

  • 1
    If you already have a charge from umaxapp.com, contact your bank or card issuer and open a dispute while you gather receipts and timestamps.
  • 2
    Before paying or subscribing, ask the vendor for clear written pricing, a refund policy, and the legal company name; avoid giving payment until you get those.
  • 3
    Test the contact channels: send an email to contact@umaxapp.com and note response time and content; take screenshots of all replies.
  • 4
    Check your App Store / Google Play subscriptions page (or payment provider) for recurring charges and cancel immediately if you don’t recognize them.
  • 5
    If suspicious charges continue, report the transaction to consumer protection (your bank, Apple/Google, and local authorities) and consider filing a chargeback.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →