Is ozonekeydex.com a scam? TrustSniffer's high-risk assessment: 7/100

Overview

The website at ozonekeydex.com presents a single Arabic-language landing page titled as a 24/7 emergency roadside-assistance service for Riyadh. It reads as a consumer service-business page offering urgent help to drivers. Its domain name has no evident connection to that offering. The domain name reads like a trading or exchange-style brand, so the purpose of the site and the identity of its operator are unclear.

Scam/Impersonation Risk

The central finding is a confirmed adverse external reputation. The domain is currently blacklisted by third-party threat-intelligence sources. One engine rates it malicious and two more rate it suspicious. Reputation intelligence also carries a phishing association for the domain. This convergence is decisive for the risk posture. The shared hosting infrastructure is not itself reported for abuse, so the adverse signal attaches to the domain and its content rather than to the network that serves it. The mismatch between the exchange-style domain name and the roadside-assistance page is a further coherence problem. A visitor who arrives expecting one kind of service and finds another is a pattern common to lure and redirect campaigns. Under controlled interaction testing the page showed no wallet-draining behaviour, no clipboard manipulation, no hidden or externally posting credential forms, and no content cloaking. These checks lower the likelihood of automated, drive-by theft. They do not offset the blacklisting, because a page can stay benign in testing and be activated later for targeted lures. No conflicting legal identities were observed, and the concern here is reputational rather than an identity contradiction. Evidence:

• Homepage: the page title advertises 24/7 emergency roadside help in Riyadh, which does not match the exchange-style domain name.
• Reputation intelligence: the domain is blacklisted, with one malicious and two suspicious detections from aggregated security engines.
• Domain registration: created 2026-08-31, about 0.14 years (roughly 51 days) old, so the domain has no track record.
• Sandbox behaviour: three of three runs completed with no console errors and no wallet-connection, clipboard-write, hidden-form or cloaking activity. Nine external data requests were observed, six of them to non-allow-listed destinations.

Regulatory Verification Notes

The captured page shows no licensing, registration or company-identity disclosure. For a service advertising emergency roadside assistance, that absence is a content gap. No regulatory registry match was established, and no third-party broker reputation record matched the site. The real-world operator remains unconnected to any verified brand or person. Registrant details are not publicly attributed to a named entity, which counts as ownership opacity and not as an identity contradiction. The registrar is Dominet (HK) Limited, and registration runs to 2027. The transport-encryption certificate is valid but is only a domain-validated type. It confirms control of the domain, not the identity or trustworthiness of the operator. Evidence:

• Homepage: no operator name, licence number or registered address is presented.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-11-29, with about 38 days remaining.
• Registration: registrar Dominet (HK) Limited; domain expires 2027-08-31.

What to Verify Next

Any dealings should first be checked against channels independent of this website. The advertised roadside service should be matched to a real Saudi provider through an official business registry or established directory, with its phone number and address confirmed offline. Whether the domain legitimately belongs to that provider should be established directly with the provider. The site should not be treated as official until the provider confirms it. The security status of the domain should also be re-checked on current reputation sources before any interaction, because a young domain's listings change quickly. Evidence:

• Homepage: the roadside-assistance claims name no verifiable operator or location details.
• Reputation: the active blacklisting should be re-checked against live sources.
• Registration: the domain is only weeks old, so it has no independent history to corroborate the claims.

Summary Verdict

The overall posture is high-risk. External threat intelligence blacklists the domain, and the domain is newly registered. The page's stated purpose does not match its domain identity, and the operator is unattributed. Clean behaviour in sandbox testing is a minor mitigating factor. It is far outweighed by the adverse reputation, which makes the site unsuitable for sensitive interaction.

Infrastructure Integrity

The site is served through Cloudflare's CDN and WAF, and all four observed addresses are edge nodes, so the origin server could not be seen. This protection is a mitigating factor only. It does not establish legitimacy, and it prevents independent hosting verification. It can also mask rapid content changes behind a stable front end, which matters for a domain this new. The infrastructure is a mainstream provider with an identified network, valid transport encryption and a known certificate issuer. These facts reduce technical-abuse concerns but cannot offset the reputation findings.

Closing Assessment

The site should be limited to passive, read-only viewing at most. No account login, credential entry, payment or personal-data submission should take place, and nothing should be downloaded from it. Anyone needing roadside assistance in Riyadh should use a provider reached through an independently confirmed channel.