Online Snyfer Research Team

Published 2026-09-14Updated 2026-09-14Scan ID 5a53fd1719234172b0d1ea6e14c326e3

vorexlan.info

Is vorexlan.info a scam? What our scan found

Name: Forensic scan report for vorexlan.info
Creator: Snyfer
License: https://snyfer.com/terms-conditions

High Risk04/ 100

0-2425-4445-6970-8485-100

Think you may have lost money to this site?

Tell us what happened and get free advice on your case. It is confidential.

Get help

The site

What this site
actually is.

Site blocked our scanner IP via Cloudflare WAF — content not accessible

Page capture

Screenshot unavailable

Identity

IP: 185.191.124.115
ASN: AS206264
Country: Netherlands
Domain age: 9 months
Registrar: NETIM SAS
Server: openresty
Hosting: Amarutu Technology Ltd
Tech detected: 1

The verdict

The score is not
an opinion.

Every domain starts at 100. 5 scoring chains fired against vorexlan.info, and every one of them is listed below with the tier it reached. It is a measurement, not a ruling on whether the business is legitimate.

Trust Score: the full methodology and every weight

Triggered findings

Regulatory Tier 1
Antivirus Tier 1
Domain Age Tier 2
Malicious Requests Tier 1
WHOIS Tier 1

The record

How it got there,
and where it sits.

The score across every scan we hold, the eight signal families behind the current one, and the dates the engine recorded on the way.

Signal profile data

Maturity: 40 out of 100. 289 days old
AV clarity: 92 out of 100. 1 of 89 engines flag it
Regulators: 65 out of 100. 1 regulator warning
Network: 92 out of 100. No malicious neighbours
Blacklist: 100 out of 100. Not blacklisted
Trust zone: 50 out of 100. .info top-level domain
Infra: 53 out of 100. Valid SSL · 1 tech detected
Hosting: 75 out of 100. Hosted in NL

Domain history

Recorded scans: Sep 14, 2026

Score history data

Recorded scan scores
Date (UTC)	Score	Verdict
Sep 14, 2026	4/100	High Risk

NOV 282026Domain expiresWHOISDomain vorexlan.info is set to expire.
OCT 312026SSL certificate expiresSSL CheckSSL certificate will expire.
SEP 142026Flagged by VirusTotalVirusTotalFlagged by 1 engine as malicious on VirusTotal.
SEP 142026First scansnyferTrust score 4 out of 100.
AUG 122026Domain updatedWHOISvorexlan.info WHOIS record was updated.
AUG 22026SSL certificate issuedSSL CheckSSL certificate issued by Let's Encrypt.
MAR 272026Warned by FI_SERegulator FI_SE (SE) published an investor warning for vorexlan.info.
NOV 282025Domain createdWHOISDomain vorexlan.info was registered.

Signals

We are not the first
to say it.

2 independent sources have flagged this domain: security vendors, public authorities that have published warnings, and blocklist feeds. Nothing that found it clean is listed.

Regulators

FI_SE - Sweden03/27/26View

Antivirus engines

Kasperskyphishing

Check the VirusTotal analysis yourself

Where it lives

Where it actually
answers from.

Hosting, registrar, certificate and nameservers, as our crawler measured them rather than as the site describes itself.

Registration

Registrar: NETIM SAS
Created: Nov 28, 2025
Expires: Nov 28, 2026
Age: 9m
Privacy: enabled

ns01.navirel.comns02.navirel.com

Hosting

IP: 185.191.124.115
ASN: AS206264
Provider: Amarutu Technology Ltd
Country: Netherlands
City: Lelystad
Server: openresty
Proxied: behind Cloudflare

SSL certificate

Issuer: Let's Encrypt
Protocol: TLSv1.3
Valid: yes
Expires: Oct 31, 2026

Technologies

Tailwind CSS· css-framework

Server location

52.508, 5.475© OpenStreetMap

Location: Lelystad, Netherlands
IP: 185.191.124.115
Hosting: Amarutu Technology Ltd · AS206264

Security headers

content_security_policyNot set
strict_transport_securityNot set
x_frame_optionsNot set
x_content_type_optionsNot set
referrer_policyNot set
permissions_policyNot set
x_xss_protectionNot set
cross_origin_opener_policyNot set

Under the page

What the page loads
behind your back.

Everything it requested, everything it stored on the visitor's machine, and every host it talked to while doing it.

Page timing

0.36stotal page load

DNS Lookup0ms

TCP Connect0ms

TLS Handshake0ms

TTFB41ms

Content Download2ms

DOM Loaded362ms

Page Load363ms

Resources

-7 requests

other5 · 71%

documents1 · 14%

stylesheets1 · 14%

Cookies

Secure

HttpOnly

Session

name	domain	flags
__cf_bm	.dash.cloudflare.com	SH

Network stats

7
total requests: 6
failed requests: 3
unique domains: 86%
third party: 100%
https

HTTP transactions

Raw scan data

DownloadMarkdown JSON CSV STIX 2.1

{
  "domain": "vorexlan.info",
  "scanId": "5a53fd1719234172b0d1ea6e14c326e3",
  "status": "completed",
  "indexable": false,
  "publicNotice": null,
  "completedAt": "2026-09-14T00:10:19.773Z",
  "ageDays": 0,
  "fresh": true,
  "verdict": "dangerous",
  "trustScore": 4,
  "badges": [
    {
      "name": "regulatory_tier1",
      "chain": "regulatory",
      "tier": 1,
      "maxTier": 4,
      "score": -70,
      "description": "Flagged by 1 financial regulator"
    },
    {
      "name": "antivirus_tier1",
      "chain": "antivirus",
      "tier": 1,
      "maxTier": 4,
      "score": -21,
      "description": "Detected by 1-2 engines"
    },
    {
      "name": "domain_age_tier2",
      "chain": "domain_age",
      "tier": 2,
      "maxTier": 5,
      "score": -3,
      "description": "Domain < 1 year"
    },
    {
      "name": "malicious_requests_tier1",
      "chain": "malicious_requests",
      "tier": 1,
      "maxTier": 2,
      "score": -2,
      "description": "5+ failed network requests"
    },
    {
      "name": "whois_privacy_tier1",
      "chain": "whois_privacy",
      "tier": 1,
      "maxTier": 1,
      "score": 0,
      "description": "WHOIS privacy protection enabled"
    }
  ],
  "reachable": true,
  "unreachableReason": null,
  "category": null,
  "categoryReasoning": "Site blocked our scanner IP via Cloudflare WAF — content not accessible",
  "regulatorFlagged": true,
  "regulators": [
    {
      "name": "FI_SE",
      "country": "SE",
      "url": "https://www.fi.se/en/our-registers/investor-alerts/investor-alerts/2026/mars/vorexlan/",
      "warningDate": "2026-03-27T00:00:00.000Z"
    }
  ],
  "contacts": {
    "emails": [],
    "phones": [],
    "addresses": []
  },
  "technologies": [
    {
      "name": "Tailwind CSS",
      "category": "css-framework"
    }
  ],
  "antivirus": {
    "detections": [
      {
        "engine": "Kaspersky",
        "result": "phishing",
        "engineType": "antivirus"
      }
    ],
    "enginesTotal": 89,
    "permalink": "https://www.virustotal.com/gui/domain/vorexlan.info",
    "scannedAt": "2026-09-14T00:10:16.976Z"
  },
  "blacklists": [
    {
      "provider": "google_safe_browsing",
      "flagged": false,
      "threats": []
    }
  ],
  "registration": {
    "registrar": "NETIM SAS",
    "registrarIanaId": "1519",
    "createdAt": "2025-11-28T08:49:40.441Z",
    "updatedAt": "2026-08-12T11:31:29.405Z",
    "expiresAt": "2026-11-28T08:49:40.441Z",
    "ageDays": 289,
    "ageText": "9m",
    "privacyProtected": true,
    "nameservers": [
      "ns01.navirel.com",
      "ns02.navirel.com"
    ]
  },
  "certificate": {
    "issuer": "Let's Encrypt",
    "validFrom": "2026-08-02T11:32:30.000Z",
    "validUntil": "2026-10-31T11:32:29.000Z",
    "valid": true,
    "protocol": "TLSv1.3"
  },
  "hosting": {
    "ip": "185.191.124.115",
    "countryCode": "NL",
    "countryName": "Netherlands",
    "city": "Lelystad",
    "provider": "Amarutu Technology Ltd",
    "asn": 206264,
    "serverSoftware": "openresty",
    "mapImageUrl": null,
    "latitude": 52.5083,
    "longitude": 5.475,
    "behindCloudflare": true
  },
  "timing": {
    "dnsMs": 0,
    "connectMs": 0,
    "tlsMs": 0,
    "ttfbMs": 41,
    "downloadMs": 2,
    "domReadyMs": 362,
    "loadCompleteMs": 363
  },
  "resources": [
    {
      "kind": "other",
      "count": 5,
      "bytes": 0
    },
    {
      "kind": "documents",
      "count": 1,
      "bytes": 0
    },
    {
      "kind": "stylesheets",
      "count": 1,
      "bytes": 0
    }
  ],
  "networkStats": {
    "totalRequests": 7,
    "totalBytes": 0,
    "failedRequests": 6,
    "uniqueDomains": 3,
    "thirdPartyRatio": 0.8571,
    "httpsPercentage": 100
  },
  "cookies": [
    {
      "name": "__cf_bm",
      "domain": ".dash.cloudflare.com",
      "secure": true,
      "httpOnly": true,
      "expiresAt": null
    }
  ],
  "identity": {
    "finalUrl": "https://vorexlan.info/",
    "brandName": null,
    "faviconUrl": "/api/scan/favicon/5a53fd1719234172b0d1ea6e14c326e3"
  },
  "telemetry": {
    "statusCode": 403,
    "durationMs": 25625,
    "scraper": "patchright",
    "attempts": 1,
    "source": "batch",
    "contentType": "text/html"
  },
  "securityHeaders": [
    {
      "key": "content_security_policy",
      "present": false,
      "value": null
    },
    {
      "key": "strict_transport_security",
      "present": false,
      "value": null
    },
    {
      "key": "x_frame_options",
      "present": false,
      "value": null
    },
    {
      "key": "x_content_type_options",
      "present": false,
      "value": null
    },
    {
      "key": "referrer_policy",
      "present": false,
      "value": null
    },
    {
      "key": "permissions_policy",
      "present": false,
      "value": null
    },
    {
      "key": "x_xss_protection",
      "present": false,
      "value": null
    },
    {
      "key": "cross_origin_opener_policy",
      "present": false,
      "value": null
    }
  ],
  "redirects": [],
  "transactions": [
    {
      "url": "https://vorexlan.info/",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 403,
      "bytes": 0,
      "thirdParty": false
    },
    {
      "url": "https://cloudflare.com/cdn-cgi/styles/cf.errors.css",
      "method": "GET",
      "resourceType": "stylesheet",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-32x32.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-16x16.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-96x96.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-128.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://dash.cloudflare.com/favicon-196x196.png",
      "method": "GET",
      "resourceType": "other",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    }
  ],
  "hasCapture": false,
  "archive": {},
  "networkSize": 0
}

From readers

What people who
were there told us.

Complaints and first-hand accounts sent to us about this domain. Read by a person before publication, never posted automatically.

0 reports for this domain

Submit a report

No reports yet

Be the first to share what happened with this site: a withdrawal that will not process, a refund you never received, an account you can no longer reach. Reports are pre-moderated and anonymous by default.

Submit the first report