Is irisrainstorm.com safe?
http://irisrainstorm.com/
Checked on
How we checked
Coverage: strong · 5 of 6 applicable core capabilities
- Antivirus (57 of 93 engines answered): completed
- Google Safe Browsing: completed
- page reading · not available: did not fully complete
- page capture: completed
- domain records: completed
- web research: completed
A 20-day-old domain that redirects to a 404 page and asks security tools to allowlist it, with no operator named anywhere
irisrainstorm.com sends visitors to jump.irisrainstorm.com, which returns HTTP 404, so no product, About, contact or policy text could be reviewed. The only rendered content is a boilerplate notice telling cybersecurity professionals that the domain delivers "authorized advertising" and should be added to an allowlist, with no company, address, phone or email disclosed. Clean antivirus and Safe Browsing results and a valid certificate show no detections, but they do not identify who runs the site or what it serves, so the score sits in the High Risk band.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 38/100
High Risk covers scores 21–44. 2 findings pulled the score down; 1 pushed it up.
What pulled the score down
- MinorThe root redirects to a subdomain that returns HTTP 404, so no product, contact, About or policy text could be reviewed.
- MinorThe rendered page asks cybersecurity professionals to allowlist the domain for "authorized advertising" without naming any operator, publisher or company.
What pushed the score up
- Supports0 malicious and 0 suspicious detections across 93 engines, no Safe Browsing warning, and a valid encrypted connection.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor).
Lost money or shared details on irisrainstorm.com? Do this now
Act quickly: the first hours matter most for a chargeback.
- Call your bank or card issuer now
Ask them to dispute the charge or open a chargeback; the sooner you act, the better your odds. Card payments can often be reversed. Bank transfers and gift cards are harder, but report them to your bank too. Crypto payments usually cannot be reversed: report the wallet address and transaction ID to the exchange you sent from.
- Change any password you entered
If you entered a password on irisrainstorm.com, change it there and anywhere you reused it, and turn on two-factor authentication. Keep screenshots, order confirmations and messages as evidence.
- Report the site
Reports help get scam sites taken down faster and warn other people.
- Report the domain to its registrar
GoDaddy.com, LLC takes abuse reports at abuse@godaddy.com (480-624-2505). Include the address and what happened.
- Ignore anyone offering to recover your money
"Recovery" services or agents who contact you, or ask for a fee up front, are almost always a second scam aimed at victims. Your bank's dispute process and the official reporting services never charge a fee in advance.
Full answers about refunds and reporting are in the Safety FAQ below.
01 · Investigation Brief
Investigation Brief
irisrainstorm.com sends visitors to jump.irisrainstorm.com, which returns HTTP 404, so no product, About, contact or policy text could be reviewed. The only rendered content is a boilerplate notice telling cybersecurity professionals that the domain delivers "authorized advertising" and should be added to an allowlist, with no company, address, phone or email disclosed. Clean antivirus and Safe Browsing results and a valid certificate show no detections, but they do not identify who runs the site or what it serves, so the score sits in the High Risk band.
A redirect to a 404 and a page written for security vendors
The root address redirects to the subdomain jump.irisrainstorm.com, and that page returns HTTP 404. The site's own page, contact, About and policy text was not reviewed because there is nothing readable to review.
What does render is a green shield icon, the hostname as the heading, and a section titled "Notice for cybersecurity professionals" with the question "What Is This Domain?". It states the domain "provides authorized services through official partnerships with publishers" and supports delivery of ads and essential web assets.
A highlighted box warns that blocking the domain may restrict access and recommends "adding it to your allowlist", and a "Privacy & Security" section says the domain is used solely to deliver authorized advertising under the publisher's terms. No company name, address, phone or email appears anywhere on the page.
Clean scanners, unidentified operator
No engine flagged the domain: 0 malicious and 0 suspicious detections across 93 engines, the browser threat feed returned no threat warning, and the saved TLS check found a valid encrypted connection. Those results mean nothing malicious was detected at scan time, not that the operator is accountable.
The registrable domain is 20 days old, so there is no operating history to weigh, and the hosting IP carries an abuse confidence score of 34/100 across 31 saved reports. That score describes shared infrastructure and does not by itself tie prior abuse to this domain.
Independent web research returned no findings for this domain, so its public reputation is unverified. A page whose only purpose is to persuade filtering tools to unblock it, published by an operator who names no one, is the shape of ad-delivery and redirect infrastructure rather than a disclosed business.
Why the score is 38
The rendered page asks cybersecurity professionals to allowlist the domain for "authorized advertising" without naming any operator, publisher or company.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 93
No detectionsFresh result
No detections across 57 engines that rated this URL
No antivirus engine that answered raised an adverse result; 36 had no rating for this URL. This is one signal, not a guarantee.
- Malicious
- 0
- Suspicious
- 0
- Total
- 93
All 93 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Unrated
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Forcepoint ThreatSeekernewly registered websites
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
Rendered page shows a green shield check icon and the hostname 'jump.irisrainstorm.com' as the page heading. Section titled 'Notice for cybersecurity professionals' with heading 'What Is This Domain?' stating the domain 'provides authorized services through official partnerships with publishers' and supports delivery of ads and essential web assets. Highlighted notice box advises that blocking the domain may restrict access and recommends 'adding it to your allowlist'. 'Privacy & Security' section states the domain is used solely to deliver authorized advertising in accordance with the publisher's terms; no company name, address, phone or email is visible.
What the captured page showed
4 observations- 01
Rendered page shows a green shield check icon and the hostname 'jump.irisrainstorm.com' as the page heading.
- 02
Section titled 'Notice for cybersecurity professionals' with heading 'What Is This Domain?' stating the domain 'provides authorized services through official partnerships with publishers' and supports delivery of ads and essential web assets.
- 03
Highlighted notice box advises that blocking the domain may restrict access and recommends 'adding it to your allowlist'.
- 04
'Privacy & Security' section states the domain is used solely to deliver authorized advertising in accordance with the publisher's terms; no company name, address, phone or email is visible.
03 · Investigation Story
Investigation story
What the site claims
No page claim could be verified for irisrainstorm.com because no usable page content or saved capture was available.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Aggressive Ads & Malvertising
Service and business model
Unknown
Observed behavior
Evidence behind this classification
- 01The registrable domain is 20 days old, so there is no operating history to assess.
- 02The hosting IP has an abuse confidence score of 34/100 across 31 saved reports, which reflects shared infrastructure rather than this domain specifically.
- 03The root redirects to a subdomain that returns HTTP 404, so no product, contact, About or policy text could be reviewed.
If this is a scam — what it means for you
What a visitor actually encounters
A visitor who opens irisrainstorm.com is bounced to jump.irisrainstorm.com and lands on a 404 page carrying an allowlist request, so there is no shop, signup, download or payment step to interact with.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The page's stated purpose is delivering advertising and web assets on behalf of unnamed publishers. If that infrastructure is later used to serve ads or redirects, the visitor has no named party to hold responsible and no contact route on the site.
Do not treat this domain as a trusted destination or add it to any allowlist on the strength of its own notice. There is no readable site, no named operator and no contact route, so avoid entering personal details or following links it serves, and prefer sources you can identify.
Web research findings
Independent findings for irisrainstorm.com, including public complaints, named review sources, registration records, and look-alike-domain evidence.
No independently sourced scam reports or credibility records were found for irisrainstorm.com. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domainirisrainstorm.com
- Redirects tojump.irisrainstorm.com
- Hosted byAmazon Technologies Inc.
Domain Timeline
- Oct 17, 2026Domain registered
First appeared in WHOIS records — 20 days old when this review was saved.
- Nov 6, 2026Saved security review — Rated High Risk
The completed checks from this saved scan are detailed above.
irisrainstorm.com was registered very recently when this review was saved and was already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.
Domain & Encryption
Report this domain to its registrar: send the address and what happened to this contact.
A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.
Certificate issued for jump.irisrainstorm.com.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Redirect Chain
- 1301http://irisrainstorm.com/
- 2404https://jump.irisrainstorm.com/
Server Reputation
05 · Evidence Ledger
Evidence ledger
- Antiviruscomplete
- Browser threat feedcomplete
- Page contentunavailable
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
The root redirects to a subdomain that returns HTTP 404, so no product, contact, About or policy text could be reviewed. · The rendered page asks cybersecurity professionals to allowlist the domain for "authorized advertising" without naming any operator, publisher or company.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 93 engines flagged | Completed | No adverse finding | fresh · analysed Nov 6, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 6, 2026 |
| Page content | Page content was not available for semantic review | Unavailable | No saved finding | Not available |
| Visual evidence | 4 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 6, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Nov 6, 2026 |
- Antivirus
- Result0 of 93 engines flagged
- CompletionCompletedFindingNo adverse finding
- Freshnessfresh · analysed Nov 6, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 6, 2026
- Page content
- ResultPage content was not available for semantic review
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Visual evidence
- Result4 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 6, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 6, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is irisrainstorm.com a scam or a legit site?
Is irisrainstorm.com safe to use?
What is the risk from the ads and redirects on irisrainstorm.com?
Why does irisrainstorm.com open unrelated pages or pop-ups?
How do I stop the pop-ups or notifications from irisrainstorm.com?
Has irisrainstorm.com been flagged by antivirus engines?
Is irisrainstorm.com on any phishing or malware blacklists?
How old is the irisrainstorm.com domain?
Does irisrainstorm.com have a valid SSL certificate?
Where is irisrainstorm.com hosted?
How often is the irisrainstorm.com report updated?
08 · Final Verdict
Final verdict
A 20-day-old domain that redirects to a 404 page and asks security tools to allowlist it, with no operator named anywhere
irisrainstorm.com sends visitors to jump.irisrainstorm.com, which returns HTTP 404, so no product, About, contact or policy text could be reviewed. The only rendered content is a boilerplate notice telling cybersecurity professionals that the domain delivers "authorized advertising" and should be added to an allowlist, with no company, address, phone or email disclosed. Clean antivirus and Safe Browsing results and a valid certificate show no detections, but they do not identify who runs the site or what it serves, so the score sits in the High Risk band.
09 · Community
Community
Are you the owner of irisrainstorm.com?Verify and reply