Is alloxai.net a scam? TrustSniffer's high-risk assessment: 0/100

Overview

alloxai.net is a newly registered website whose captured homepage carries the page title "Google", a name unrelated to the domain. It delivers a single page of roughly three thousand characters of text, and that page gives no clear product, service or commercial model. Its apparent purpose cannot be established from the material captured, and its real-world operator has not been independently identified.

Scam/Impersonation Risk

This is the most serious area of the assessment. Several independent threat-intelligence engines currently flag the domain: three classify it as malicious and one as suspicious. This amounts to a confirmed blacklist condition and is the decisive element of the elevated-risk posture. The homepage title "Google" conflicts with the domain name and is a brand-borrowing pattern commonly seen on lookalike and decoy sites. The evidence does not establish brand impersonation, phishing or conflicting legal identities. Browser-side behaviour adds some concern. Three suspicious inline scripts ran on the page, and most of its network traffic went to external destinations, including a significant number of background data requests and form-style submissions to third-party hosts. None of those destinations fell outside the expected allow-list. The sandbox saw no wallet-connection attempts, clipboard manipulation, hidden forms, credential forms posting off-site, or content cloaking. The site's age compounds the concern, because a domain only weeks old with active blacklist hits has had no time to build a legitimate track record. Evidence:

• Homepage, threat reputation: three engines flag the domain as malicious and one as suspicious, with the flags corroborated by an additional external blacklist indicator.
• Homepage, page title: the title reads "Google" on an unrelated domain.
• Homepage, browser behaviour: 3 suspicious inline scripts were observed, along with 38 external background data requests and 14 external submissions, with roughly 78% of peak network activity directed externally.
• Domain provenance: registered 2026-09-10 (~0.12 years old). The web archive holds only 4 snapshots, spanning 2026-09-11 to 2026-09-22.

Regulatory Verification Notes

The captured pages give no verifiable corporate identity, licence or registration details, and the on-page disclosure position remains unclear. Because the site's purpose is unknown, it is not possible to say which regulatory regime would apply. No third-party broker or regulatory-database entry matches the domain, so no external signal either supports or undermines the site on regulatory grounds. WHOIS privacy shielding is a routine administrative choice and is not treated as an identity contradiction. The domain was registered through a mainstream corporate registrar, Namecheap, which is a neutral fact. The valid TLS certificate is a baseline hygiene item. It says nothing about the operator's legitimacy, because domain-validated certificates are issued automatically to any domain holder. Evidence:

• Registration record: registrar NAMECHEAP INC, created 2026-09-10, expires 2027-09-10, with owner details withheld by a privacy service.
• Hosting: served from AS54113 (Fastly, Inc., US).
• Transport encryption: TLS certificate issued by YR2 (DV validation), valid to 2026-12-10.
• Identity: no real-world brand or person could be independently linked to the site.

What to Verify Next

No sensitive interaction is recommended while the blacklist flags are active. The checks below concern whether the flags clear and whether any operator can be identified. First, re-test the domain against several independent reputation services after some time has passed, to see whether the malicious classifications are withdrawn or confirmed. Second, if a trusted party directed a visitor to this domain, confirm with that party through an independent, offline channel that the address is intended and legitimate. Third, establish why the homepage is titled "Google". If any claim of affiliation with that brand is made, verify it directly with the brand through its official channels, not through any link on this site. Fourth, any service the operator later claims to offer should be checked against the relevant licensing registry before any engagement. Evidence:

• Homepage title: the "Google" title conflicts with the domain.
• Reputation: three malicious classifications and one suspicious classification are currently active.
• Domain history: the domain is about six weeks old, with a very short archive record.

Summary Verdict

The overall posture is high-risk. Confirmed multi-engine threat detections, a very recent domain with minimal history, and a page identity that does not match its domain converge into a clearly cautionary assessment. Identity remains unverified, and no legitimate-operator conclusion can be drawn from the available evidence.

Infrastructure Integrity

The site sits behind Fastly's content-delivery network, and every observed address is an edge node, so the origin server could not be seen. This is a mitigating factor only and cannot offset the threat detections. The abuse reports on record (48 against one of the edge addresses) relate to a content-delivery address operated by GitHub that serves many unrelated sites. They are therefore attributed to shared infrastructure and are not evidence of misconduct by this domain specifically. Edge-only visibility does prevent independent verification of the hosting and means content could be swapped quickly without any visible infrastructure change. The unconfirmed heuristics (fragmented addressing and sparse subdomains on a young domain) are consistent with a newly launched site and carry little weight on their own.

Closing Assessment

Treat the site as unsafe for any login, credential entry, payment or financial interaction. At most, use it for read-only viewing, ideally from an isolated or disposable browsing environment. Do not download files from it or connect wallets or accounts. Reassess only if the threat flags are withdrawn and an accountable operator can be independently identified.

Signals weighed against the site

• AbuseIPDB: 48 reports on hosting IP 185.199.109.153 (GitHub, Inc., Content Delivery Network), 44% confidence. The reports are attributed to shared infrastructure, not specifically to this website.