Domain Due Diligence
Report for Wexinc.com
Why we think so
WEX Inc. (wexinc.com) is a high-traffic, established payments and fleet/benefits platform — about 600–650K visits/month and a domain registered in 2011. The site runs enterprise tech (AWS, Cloudflare, Google Analytics), accepts major payments processors, and has an active corporate/news presence (NYSE company coverage). However, consumer complaint records (BBB, PissedConsumer) include multiple reports of unauthorized transactions and difficult dispute/resolution outcomes — one complaint cites a $31,758.34 loss. No public blacklists or Safe Browsing flags were detected, but repeated customer fraud claims plus WHOIS privacy warrant caution. Verdict: ⚠️ Suspicious — legitimate business signals but material reputation/dispute signals; verify contracts and payment flows before transacting.
Risk Insights
High legitimacy signals but real dispute reports
Contradictory Signals
The company appears legitimate at scale, yet some customers report significant unresolved losses — this is operational/reputational risk rather than proof of an outright scam.
Signal A: High traffic, enterprise tech, public company coverage (supports legitimacy)
Signal B: Multiple consumer reports of unauthorized charges and poor dispute outcomes (raises fraud/operational risk)
Category Scores
Red Flags & Warnings
-
Multiple consumer complaints alleging unauthorized transactions and poor dispute resolution (BBB/PissedConsumer); at least one complaint cites a $31,758.34 loss.
-
WHOIS uses an Identity Protection Service for registrant details, creating some opacity about the domain owner despite long registration age.
-
Past regulatory/legal items (SEC enforcement on reporting controls; trademark litigation) show the company has had material legal exposure — relevant when assessing operational risk.
🔎 Detailed Checks & Analysis
Domain age
Domain age
"A domain age of ~14 years lowers the likelihood this is a throwaway scam domain; long registration supports continuity of operations."
Reason: Domain was registered in 2011 (long-lived), which strongly suggests this is an established property.
Technical hygiene (TLS, DNS, SPF, CDN)
Technical hygiene (TLS, DNS, SPF, CDN)
"The site has multiple TXT verification records (Google, Globalsign, Pardot), a valid GlobalSign TLS cert, and uses AWS nameservers — typical for corporate sites."
Reason: Valid TLS certificate, SPF records and enterprise DNS/hosting (AWS, Cloudflare) observed.
Public company / press presence
Public company / press presence
"Frequent BusinessWire/Yahoo Finance investor items and earnings releases indicate a traceable corporate entity and public disclosures."
Reason: WEX appears in multiple recent news releases and investor communications, consistent with a listed company.
Blacklist / Safe Browsing
Blacklist / Safe Browsing
"Absence from major blocklists reduces the chance this domain is used for mass phishing or crypto scams right now."
Reason: No Google Safe Browsing hits or crypto blacklist matches were found in scans.
Consumer complaint signal
Consumer complaint signal
"Repeated reports on BBB and consumer-review sites of unresolved disputes and alleged unauthorized charges are a material reputation risk and reduce trust."
Reason: Multiple consumer complaints allege unauthorized charges and poor dispute handling; some report large dollar losses.
WHOIS transparency
WHOIS transparency
"Although the registrar is reputable (Amazon Registrar) and the domain is long-lived, use of privacy services reduces direct registrant traceability."
Reason: Registrant listed via an identity protection service rather than a company name, introducing some opacity.
Your Next Steps
-
1If you plan to transact: use business contracts and corporate invoices; avoid ad-hoc payments through unknown channels.
-
2Before paying, verify the counterparty via SEC filings (if dealing with WEX corporate) or phone numbers listed on the corporate site; call published investor or support numbers and confirm contract details in writing.
-
3If you suspect unauthorized charges: document transaction IDs and open a dispute with your bank immediately; ask WEX for their fraud/dispute reference and escalate if unresolved.
-
4Check recent BBB and consumer-review threads for patterns matching your issue (charge type, card type, resolution outcomes) before committing funds.
-
5For large or recurring payment arrangements, request contractual SLAs and refund/chargeback procedures in writing and consider escrow or bank-mediated payment methods.
Evidence & Citations
-
SimilarWeb site analytics for wexinc.com (visits, geography, engagement)
SimilarWeb estimates ~649,684 monthly visits with ~87% of traffic from the U.S., and shows search + direct as primary traffic channels.
-
Technology stack and integrations reported for wexinc.com
Scans show AWS hosting, Cloudflare, Google Analytics, Adyen/Stripe/PayPal support, and many enterprise marketing/analytics tools — consistent with a payment platform.
-
Aggregated consumer complaints and analysis about WEX Inc.
Multiple BBB and review-site complaints describe unauthorized transactions and difficult dispute outcomes; one complaint reports $31,758.34 in claimed unauthorized charges.
-
WHOIS, DNS and SSL scan for wexinc.com
Domain created in 2011, registrar Amazon Registrar, Inc.; registrant listed via an identity protection service (UK), and TLS cert currently valid.
-
Google Safe Browsing and crypto blacklist checks
No Safe Browsing threats and no crypto scam blacklist matches were found in the collected scans.
-
News and investor releases mentioning WEX Inc.
Recent press (BusinessWire, Yahoo Finance) shows typical corporate reporting and investor communications consistent with a public company.
-
Emails and contact channels discovered on wexinc.com
Site-hosted contacts include governmentmailbox@wexinc.com, investor and product contacts, and active corporate social profiles for verification.
🕵🏻 Keep investigating
Run another instant due diligence scan on any website URL. Verify before you trust!
Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...
Read playbook →Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...
Read playbook →