Online Snyfer Research Team

Published 2026-09-13Updated 2026-09-13Scan ID 4c8f1667c64a4ce0b70434b7611bb801

iroxivor.net

iroxivor.net scam warning: is your money at risk?

Name: Forensic scan report for iroxivor.net
Creator: Snyfer
License: https://snyfer.com/terms-conditions

High Risk01/ 100

0-2425-4445-6970-8485-100

Think you may have lost money to this site?

Tell us what happened and get free advice on your case. It is confidential.

Get help

The site

What this site
actually is.

Site blocked our scanner IP via Cloudflare WAF — content not accessible

Page capture

Screenshot unavailable

Identity

IP: 194.5.98.55
ASN: AS149020
Country: Norway
Domain age: 9 months
Registrar: MainReg Inc.
Server: openresty
Hosting: WebHorizon Internet Services
Tech detected: 1

The verdict

The score is not
an opinion.

Every domain starts at 100. 5 scoring chains fired against iroxivor.net, and every one of them is listed below with the tier it reached. It is a measurement, not a ruling on whether the business is legitimate.

Trust Score: the full methodology and every weight

Triggered findings

Scam Farm Tier 3
Antivirus Tier 2
Regulatory Tier 1
Domain Age Tier 2
Malicious Requests Tier 1

The record

How it got there,
and where it sits.

The score across every scan we hold, the eight signal families behind the current one, and the dates the engine recorded on the way.

Signal profile data

Maturity: 39 out of 100. 285 days old
AV clarity: 67 out of 100. 4 of 89 engines flag it
Regulators: 65 out of 100. 1 regulator warning
Network: 53 out of 100. Linked to 8 domains
Blacklist: 100 out of 100. Not blacklisted
Trust zone: 74 out of 100. .net top-level domain
Infra: 53 out of 100. Valid SSL · 1 tech detected
Hosting: 75 out of 100. Hosted in NO

Domain history

Recorded scans: Sep 13, 2026

Score history data

Recorded scan scores
Date (UTC)	Score	Verdict
Sep 13, 2026	1/100	High Risk

DEC 12026Domain expiresWHOISDomain iroxivor.net is set to expire.
OCT 282026SSL certificate expiresSSL CheckSSL certificate will expire.
SEP 132026Scam network detectedThreat GraphLinked to 8 domains in a known scam network.
SEP 132026Flagged by VirusTotalVirusTotalFlagged by 4 engines as malicious on VirusTotal.
SEP 132026First scansnyferTrust score 1 out of 100.
JUL 302026SSL certificate issuedSSL CheckSSL certificate issued by Let's Encrypt.
FEB 122026Warned by FI_SERegulator FI_SE (SE) published an investor warning for iroxivor.net.
DEC 12025Domain createdWHOISDomain iroxivor.net was registered.
DEC 12025Domain updatedWHOISiroxivor.net WHOIS record was updated.

Signals

We are not the first
to say it.

5 independent sources have flagged this domain: security vendors, public authorities that have published warnings, and blocklist feeds. Nothing that found it clean is listed.

Regulators

FI_SE - Sweden02/12/26View

Antivirus engines

Kasperskyphishing
Sophosspam

Security vendors

alphaMountain.aisuspicious
SOCRadarsuspicious

Check the VirusTotal analysis yourself

Connections

One domain is never
just one domain.

Domains our engine ties to this one through shared fingerprints, not through a shared host.

Cluster map

Connected domain data (9)

Where it lives

Where it actually
answers from.

Hosting, registrar, certificate and nameservers, as our crawler measured them rather than as the site describes itself.

Registration

Registrar: MainReg Inc.
Created: Dec 1, 2025
Expires: Dec 1, 2026
Age: 9m
Privacy: disabled

ns01.orlanoz.comns02.orlanoz.com

Hosting

IP: 194.5.98.55
ASN: AS149020
Provider: WebHorizon Internet Services
Country: Norway
City: Sandefjord
Server: openresty
Proxied: behind Cloudflare

SSL certificate

Issuer: Let's Encrypt
Protocol: TLSv1.3
Valid: yes
Expires: Oct 28, 2026

Technologies

Tailwind CSS· css-framework

Server location

59.131, 10.217© OpenStreetMap

Location: Sandefjord, Norway
IP: 194.5.98.55
Hosting: WebHorizon Internet Services · AS149020

Security headers

content_security_policyNot set
strict_transport_securityNot set
x_frame_optionsNot set
x_content_type_optionsNot set
referrer_policyNot set
permissions_policyNot set
x_xss_protectionNot set
cross_origin_opener_policyNot set

Uptime history

September 2026

2026-09-011 unknown
2026-09-022 unknown
2026-09-033 unknown
2026-09-044 unknown
2026-09-055 unknown
2026-09-066 unknown
2026-09-077 unknown
2026-09-088 unknown
2026-09-099 unknown
2026-09-1010 unknown
2026-09-1111 unknown
2026-09-1212 unknown
2026-09-1313 online
2026-09-1414 unknown
2026-09-1515 unknown
2026-09-1616 unknown
2026-09-1717 unknown
2026-09-1818 unknown
2026-09-1919 unknown
2026-09-2020 unknown
2026-09-2121 unknown
2026-09-2222 unknown
2026-09-2323 unknown
2026-09-2424 unknown
2026-09-2525 unknown
2026-09-2626 unknown
2026-09-2727 unknown
2026-09-2828 unknown
2026-09-2929 unknown
2026-09-3030 unknown

online (1)offline (0)

Daily availability data

Recorded daily availability
Date (UTC)	Status	HTTP
2026-09-13	online	403

Exit scam indicator

Daily availability: Sep 13, 2026

Daily offline streak data

Daily consecutive offline days
Date (UTC)	Status	Streak
2026-09-13	online	0 days

max consecutive offline0 days

current streak0 days

Under the page

What the page loads
behind your back.

Everything it requested, everything it stored on the visitor's machine, and every host it talked to while doing it.

Page timing

0.31stotal page load

DNS Lookup0ms

TCP Connect0ms

TLS Handshake0ms

TTFB51ms

Content Download2ms

DOM Loaded313ms

Page Load314ms

Resources

-7 requests

other5 · 71%

documents1 · 14%

stylesheets1 · 14%

Cookies

Secure

HttpOnly

Session

name	domain	flags
__cf_bm	.dash.cloudflare.com	SH

Network stats

7
total requests: 6
failed requests: 3
unique domains: 86%
third party: 100%
https

HTTP transactions

Raw scan data

DownloadMarkdown JSON CSV STIX 2.1

{
  "domain": "iroxivor.net",
  "scanId": "4c8f1667c64a4ce0b70434b7611bb801",
  "status": "completed",
  "indexable": false,
  "publicNotice": null,
  "completedAt": "2026-09-13T03:07:18.503Z",
  "ageDays": 0,
  "fresh": true,
  "verdict": "dangerous",
  "trustScore": 1,
  "badges": [
    {
      "name": "scam_farm_tier3",
      "chain": "scam_farm",
      "tier": 3,
      "maxTier": 4,
      "score": -75,
      "description": "Shares code with 5-9 domains"
    },
    {
      "name": "antivirus_tier2",
      "chain": "antivirus",
      "tier": 2,
      "maxTier": 4,
      "score": -26,
      "description": "Detected by 3-4 engines"
    },
    {
      "name": "regulatory_tier1",
      "chain": "regulatory",
      "tier": 1,
      "maxTier": 4,
      "score": -15,
      "description": "Flagged by 1 financial regulator"
    },
    {
      "name": "domain_age_tier2",
      "chain": "domain_age",
      "tier": 2,
      "maxTier": 5,
      "score": -1,
      "description": "Domain < 1 year"
    },
    {
      "name": "malicious_requests_tier1",
      "chain": "malicious_requests",
      "tier": 1,
      "maxTier": 2,
      "score": -1,
      "description": "5+ failed network requests"
    }
  ],
  "reachable": true,
  "unreachableReason": null,
  "category": null,
  "categoryReasoning": "Site blocked our scanner IP via Cloudflare WAF — content not accessible",
  "regulatorFlagged": true,
  "regulators": [
    {
      "name": "FI_SE",
      "country": "SE",
      "url": "https://www.fi.se/en/our-registers/investor-alerts/investor-alerts/2026/januari/iroxivor/",
      "warningDate": "2026-02-12T00:00:00.000Z"
    }
  ],
  "contacts": {
    "emails": [],
    "phones": [],
    "addresses": []
  },
  "technologies": [
    {
      "name": "Tailwind CSS",
      "category": "css-framework"
    }
  ],
  "antivirus": {
    "detections": [
      {
        "engine": "alphaMountain.ai",
        "result": "suspicious",
        "engineType": "security_vendor"
      },
      {
        "engine": "Kaspersky",
        "result": "phishing",
        "engineType": "antivirus"
      },
      {
        "engine": "SOCRadar",
        "result": "suspicious",
        "engineType": "security_vendor"
      },
      {
        "engine": "Sophos",
        "result": "spam",
        "engineType": "antivirus"
      }
    ],
    "enginesTotal": 89,
    "permalink": "https://www.virustotal.com/gui/domain/iroxivor.net",
    "scannedAt": "2026-09-13T03:07:13.434Z"
  },
  "blacklists": [
    {
      "provider": "google_safe_browsing",
      "flagged": false,
      "threats": []
    }
  ],
  "registration": {
    "registrar": "MainReg Inc.",
    "registrarIanaId": "1917",
    "createdAt": "2025-12-01T16:10:03.000Z",
    "updatedAt": "2025-12-01T16:10:03.000Z",
    "expiresAt": "2026-12-01T16:10:03.000Z",
    "ageDays": 285,
    "ageText": "9m",
    "privacyProtected": false,
    "nameservers": [
      "ns01.orlanoz.com",
      "ns02.orlanoz.com"
    ]
  },
  "certificate": {
    "issuer": "Let's Encrypt",
    "validFrom": "2026-07-30T18:28:19.000Z",
    "validUntil": "2026-10-28T18:28:18.000Z",
    "valid": true,
    "protocol": "TLSv1.3"
  },
  "hosting": {
    "ip": "194.5.98.55",
    "countryCode": "NO",
    "countryName": "Norway",
    "city": "Sandefjord",
    "provider": "WebHorizon Internet Services",
    "asn": 149020,
    "serverSoftware": "openresty",
    "mapImageUrl": null,
    "latitude": 59.1312,
    "longitude": 10.2166,
    "behindCloudflare": true
  },
  "timing": {
    "dnsMs": 0,
    "connectMs": 0,
    "tlsMs": 0,
    "ttfbMs": 51,
    "downloadMs": 2,
    "domReadyMs": 313,
    "loadCompleteMs": 314
  },
  "resources": [
    {
      "kind": "other",
      "count": 5,
      "bytes": 0
    },
    {
      "kind": "documents",
      "count": 1,
      "bytes": 0
    },
    {
      "kind": "stylesheets",
      "count": 1,
      "bytes": 0
    }
  ],
  "networkStats": {
    "totalRequests": 7,
    "totalBytes": 0,
    "failedRequests": 6,
    "uniqueDomains": 3,
    "thirdPartyRatio": 0.8571,
    "httpsPercentage": 100
  },
  "cookies": [
    {
      "name": "__cf_bm",
      "domain": ".dash.cloudflare.com",
      "secure": true,
      "httpOnly": true,
      "expiresAt": null
    }
  ],
  "identity": {
    "finalUrl": "https://iroxivor.net/",
    "brandName": null,
    "faviconUrl": "/api/scan/favicon/4c8f1667c64a4ce0b70434b7611bb801"
  },
  "telemetry": {
    "statusCode": 403,
    "durationMs": 25472,
    "scraper": "patchright",
    "attempts": 1,
    "source": "batch",
    "contentType": "text/html"
  },
  "securityHeaders": [
    {
      "key": "content_security_policy",
      "present": false,
      "value": null
    },
    {
      "key": "strict_transport_security",
      "present": false,
      "value": null
    },
    {
      "key": "x_frame_options",
      "present": false,
      "value": null
    },
    {
      "key": "x_content_type_options",
      "present": false,
      "value": null
    },
    {
      "key": "referrer_policy",
      "present": false,
      "value": null
    },
    {
      "key": "permissions_policy",
      "present": false,
      "value": null
    },
    {
      "key": "x_xss_protection",
      "present": false,
      "value": null
    },
    {
      "key": "cross_origin_opener_policy",
      "present": false,
      "value": null
    }
  ],
  "redirects": [],
  "transactions": [
    {
      "url": "https://iroxivor.net/",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 403,
      "bytes": 0,
      "thirdParty": false
    },
    {
      "url": "https://cloudflare.com/cdn-cgi/styles/cf.errors.css",
      "method": "GET",
      "resourceType": "stylesheet",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-32x32.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-16x16.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-96x96.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-128.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-196x196.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    }
  ],
  "hasCapture": false,
  "archive": {},
  "networkSize": 8
}

From readers

What people who
were there told us.

Complaints and first-hand accounts sent to us about this domain. Read by a person before publication, never posted automatically.

0 reports for this domain

Submit a report

No reports yet

Be the first to share what happened with this site: a withdrawal that will not process, a refund you never received, an account you can no longer reach. Reports are pre-moderated and anonymous by default.

Submit the first report