--- title: "Is alloxai.net a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "alloxai.net" verdict: "Critical Risk" title: "Is alloxai.net a Scam? Risk Report, Score 0/100" trust_score: 0 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/alloxai.net assessed: 2026-10-22 --- # Is alloxai.net a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** alloxai.net shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-22 by automated analysis. Classification confidence 75%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 3 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 44% confidence (AbuseIPDB, 48 reports; shared hosting inflates reports) | Clear | | Domain age | 1 months old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (4 snapshots) | Clear | | Certificate | Encrypted connection (Issued by YR2) | Noted | ## The page as captured ![Screenshot of the alloxai.net homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/alloxai.net/screenshots/first.png) _What alloxai.net served when TrustSniffer captured it on 2026-10-22. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Overview alloxai.net is a newly registered website whose captured homepage carries the page title "Google", a name unrelated to the domain. It delivers a single page of roughly three thousand characters of text, and that page gives no clear product, service or commercial model. Its apparent purpose cannot be established from the material captured, and its real-world operator has not been independently identified. ### Scam/Impersonation Risk This is the most serious area of the assessment. Several independent threat-intelligence engines currently flag the domain: three classify it as malicious and one as suspicious. This amounts to a **confirmed blacklist** condition and is the decisive element of the elevated-risk posture. The homepage title "Google" conflicts with the domain name and is a brand-borrowing pattern commonly seen on lookalike and decoy sites. The evidence does not establish brand impersonation, phishing or conflicting legal identities. Browser-side behaviour adds some concern. Three suspicious inline scripts ran on the page, and most of its network traffic went to external destinations, including a significant number of background data requests and form-style submissions to third-party hosts. None of those destinations fell outside the expected allow-list. The sandbox saw no wallet-connection attempts, clipboard manipulation, hidden forms, credential forms posting off-site, or content cloaking. The site's age compounds the concern, because a domain only weeks old with active blacklist hits has had no time to build a legitimate track record. Evidence: - Homepage, threat reputation: three engines flag the domain as malicious and one as suspicious, with the flags corroborated by an additional external blacklist indicator. - Homepage, page title: the title reads "Google" on an unrelated domain. - Homepage, browser behaviour: 3 suspicious inline scripts were observed, along with 38 external background data requests and 14 external submissions, with roughly 78% of peak network activity directed externally. - Domain provenance: registered 2026-09-10 (~0.12 years old). The web archive holds only 4 snapshots, spanning 2026-09-11 to 2026-09-22. ### Regulatory Verification Notes The captured pages give no verifiable corporate identity, licence or registration details, and the on-page disclosure position remains unclear. Because the site's purpose is unknown, it is not possible to say which regulatory regime would apply. No third-party broker or regulatory-database entry matches the domain, so no external signal either supports or undermines the site on regulatory grounds. WHOIS privacy shielding is a routine administrative choice and is not treated as an identity contradiction. The domain was registered through a mainstream corporate registrar, Namecheap, which is a neutral fact. The valid TLS certificate is a baseline hygiene item. It says nothing about the operator's legitimacy, because domain-validated certificates are issued automatically to any domain holder. Evidence: - Registration record: registrar NAMECHEAP INC, created 2026-09-10, expires 2027-09-10, with owner details withheld by a privacy service. - Hosting: served from AS54113 (Fastly, Inc., US). - Transport encryption: TLS certificate issued by YR2 (DV validation), valid to 2026-12-10. - Identity: no real-world brand or person could be independently linked to the site. ### What to Verify Next No sensitive interaction is recommended while the blacklist flags are active. The checks below concern whether the flags clear and whether any operator can be identified. First, re-test the domain against several independent reputation services after some time has passed, to see whether the malicious classifications are withdrawn or confirmed. Second, if a trusted party directed a visitor to this domain, confirm with that party through an independent, offline channel that the address is intended and legitimate. Third, establish why the homepage is titled "Google". If any claim of affiliation with that brand is made, verify it directly with the brand through its official channels, not through any link on this site. Fourth, any service the operator later claims to offer should be checked against the relevant licensing registry before any engagement. Evidence: - Homepage title: the "Google" title conflicts with the domain. - Reputation: three malicious classifications and one suspicious classification are currently active. - Domain history: the domain is about six weeks old, with a very short archive record. ### Summary Verdict The overall posture is high-risk. Confirmed multi-engine threat detections, a very recent domain with minimal history, and a page identity that does not match its domain converge into a clearly cautionary assessment. Identity remains unverified, and no legitimate-operator conclusion can be drawn from the available evidence. ### Infrastructure Integrity The site sits behind Fastly's content-delivery network, and every observed address is an edge node, so the origin server could not be seen. This is a mitigating factor only and cannot offset the threat detections. The abuse reports on record (48 against one of the edge addresses) relate to a content-delivery address operated by GitHub that serves many unrelated sites. They are therefore attributed to shared infrastructure and are not evidence of misconduct by this domain specifically. Edge-only visibility does prevent independent verification of the hosting and means content could be swapped quickly without any visible infrastructure change. The unconfirmed heuristics (fragmented addressing and sparse subdomains on a young domain) are consistent with a newly launched site and carry little weight on their own. ### Closing Assessment Treat the site as unsafe for any login, credential entry, payment or financial interaction. At most, use it for read-only viewing, ideally from an isolated or disposable browsing environment. Do not download files from it or connect wallets or accounts. Reassess only if the threat flags are withdrawn and an accountable operator can be independently identified. _Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, history in the web archive, registration and ownership. ### 01 External reputation - Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`) ### 02 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 03 Behaviour in a sandbox - The page carried inline scripts written in a style TrustSniffer treats as suspicious. (Behaviour in a sandbox `rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS`) - Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`) ### 04 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 05 Registration and ownership - The registration record withholds contact details for the operator. (Registration and ownership `rule:KF_WHOIS_HIDDEN`) ### Signals weighed against the site - AbuseIPDB: 48 reports on hosting IP 185.199.109.153 (GitHub, Inc., Content Delivery Network), 44% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 15% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of alloxai.net. - The request for alloxai.net ended on www.google.com, a different domain. (Watch) - Registration is published under NAMECHEAP INC. (Clear) - DNS for this domain is served by registrar-servers.com, across 2 name servers. (Noted) - The registration is paid up to 2027-09-10. (Noted) - The earliest public archive of this site is from 2026-09-11. (Clear) - It is hosted on FASTLY, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | NAMECHEAP INC | | Hosting | FASTLY - Fastly, Inc., US | | Country | US | | Server IP | 185.199.109.153 | | Name servers | DNS1.REGISTRAR-SERVERS.COM, DNS2.REGISTRAR-SERVERS.COM | | CDN / edge network | Detected (fastly) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | YR2 | | SSL expiry | 2026-12-10 | | Domain age | 0.12 years (continuous registration) | | Domain expiry | 2027-09-10 | | Archive first seen | 2026-09-11 | | Archive snapshots | 4 | | Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 44% confidence, 48 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about alloxai.net at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [aml-radar.net](https://trustsniffer.com/report/aml-radar.net), another .net site assessed as critical-risk (Critical Risk, 0/100) - [cryptomuspay.net](https://trustsniffer.com/report/cryptomuspay.net), another .net site assessed as critical-risk (Critical Risk, 0/100) - [bawsaq.net](https://trustsniffer.com/report/bawsaq.net), another .net site assessed as critical-risk (Critical Risk, 0/100) - [skin-port.net](https://trustsniffer.com/report/skin-port.net), another .net site assessed as critical-risk (Critical Risk, 0/100) - [super-bridge.net](https://trustsniffer.com/report/super-bridge.net), another .net site assessed as critical-risk (Critical Risk, 5/100) - [skinsport.net](https://trustsniffer.com/report/skinsport.net), another .net site assessed as critical-risk (Critical Risk, 2/100) - [multiplifoundation.net](https://trustsniffer.com/report/multiplifoundation.net), another .net site assessed as critical-risk (Critical Risk, 0/100) - [tron-trading.net](https://trustsniffer.com/report/tron-trading.net), another .net site assessed as critical-risk (Critical Risk, 0/100) - [dappsolana.pages.dev](https://trustsniffer.com/report/dappsolana.pages.dev), another site assessed as critical-risk (Critical Risk, 5/100) - [flower-yakkamon.com](https://trustsniffer.com/report/flower-yakkamon.com), another site assessed as critical-risk (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26) - [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen) - [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance) --- *Source: [TrustSniffer](https://trustsniffer.com/report/alloxai.net) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/alloxai.net · assessed 2026-10-22.*