Security Review

Is n20io.com legit or a scam?

Our verdict:Suspicious· 52/100

Fraudulent Telegram-impersonation site flagged by multiple scanners as a cryptocurrency and money scam using fake offers.

n20io.comScanned 1h ago
0
Trust score
SUSPICIOUS
Heuristics 69·MT 40
Category tags
phishingcrypto-fraud#Phishing#Crypto Fraud#Fake Giveaway72% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
1/92
Engines flagged this URL
Domain Age
6 months old
Registered Nov 14, 2025
MT Intelligence
Suspicious
High likelihood · 72% confidence
SUSPICIOUS

Warning signs detected

Fraudulent Telegram-impersonation site flagged by multiple scanners as a cryptocurrency and money scam using fake offers. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of n20io.com
LIVE RENDER
n20io.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

30
/ 100
Moderate visual risk

Visual red flags detected in the screenshot

The screenshot matches the standard Telegram group-invite page design with no visible scam indicators in the UI itself; the only mild concern is that the group's identity and purpose are not shown, which is typical of invite links that could lead to scam groups but is not a visual scam pattern on its own.

Visual risk30/100

What our vision model saw

6 signals

Page displays a standard Telegram group chat invite UI with official Telegram branding, logo, and color scheme consistent with telegram.org join pages.

No domain/URL bar is visible in the screenshot, so a clone mismatch cannot be confirmed or denied.

No urgency tactics, countdown timers, or fake trust badges are present.

No forms requesting sensitive credentials, wallet seeds, or payment information are visible.

The 'JOIN GROUP' call-to-action is the sole interactive element; the group's name or purpose is not disclosed, which is a minor opacity concern.

Design quality and layout are consistent with legitimate Telegram web invite pages; no broken elements or placeholder text observed.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The page displays a convincing replica of Telegram's official group-invite interface, but independent security scanners have flagged it as suspicious with low trust scores (19/100 reported). The evidence package contains explicit fraud warnings from dedicated scam-detection services, which identify the site as targeting users with cryptocurrency or money scams through deceptive means. The domain is 207 days old with no verifiable business registration, no contact information, and no legitimate owner details — only an Iceland-based registrant with privacy protection disabled. The combination of a spoofed Telegram UI, confirmed scam reports, and absence of any legitimate business footprint indicates this is a phishing or credential-harvesting redirect designed to funnel users into a scam group or fake offer.
Full dossier
Analysis complete

Page Content

The page displays a standard Telegram group-chat invite interface with official Telegram branding, logo, and color scheme. The title reads 'Telegram: Join Group Chat' with no meta description. The sole interactive element is a 'JOIN GROUP' button. No group name, purpose, or member count is disclosed — a red flag for scam groups that intentionally obscure their identity.

Infrastructure

Hosted on IP 15.197.162.184 with a valid SSL certificate (Let's Encrypt, 41 days to expiry). The domain redirects across one hop to an external domain. Our antivirus network detected no malicious code, though Gridinsoft flagged it as suspicious. The IP has an abuse score of 0/100 but carries 3 historical abuse reports.

Domain History

Registered 207 days ago via Spaceship, Inc., with privacy protection disabled. Registrant information points to Iceland. No business registration, company details, or legitimate owner information is available. The domain is not indexed in global traffic rankings.

Web Reputation

Multiple independent security scanners report the site as fraudulent. Gridinsoft assigned a 19/100 trust score and flagged it as suspicious. Scam-detection services explicitly label it a cryptocurrency and money scam using fake offers and deceptive means. No positive reviews, business registrations, or legitimate mentions were found.

Risk Factors
7
  • Multiple independent security scanners flag the domain as suspicious with low trust scores (19/100 cited).
  • Explicit fraud warnings from dedicated scam-detection services identify it as targeting users with cryptocurrency or money scams.
  • No verifiable business registration, company details, or legitimate owner information despite 207-day domain age.
  • Page mimics Telegram's official group-invite UI but does not disclose the group's name, purpose, or member count — typical of scam groups.
  • No contact email, phone, postal address, or social links present on the page.
  • Domain registered in Iceland with privacy protection disabled but no transparent business footprint.
  • Gridinsoft antivirus engine flagged the domain as suspicious.
Positive Signals
4
  • SSL certificate is valid and issued by a trusted certificate authority (Let's Encrypt).
  • No malware or phishing code detected by our antivirus network (0/92 engines flagged as malicious).
  • Page design and layout are consistent with legitimate Telegram web invite pages; no broken elements or placeholder text observed.
  • No credential-harvesting forms, countdown timers, or fake trust badges are visible on the page.
AI Recommendation
Do not click the join link or enter any personal information on this page. If you received an invite to this group, report it to Telegram as a phishing attempt. Block the domain in your browser and report it to your email provider if you received the link via email.
Scam network detected
Related infrastructure identified

The domain is designed to impersonate Telegram's official group-invite interface and funnel users into a scam group or fake offer. No linked domains in the same scam network were identified, but the Telegram-spoofing pattern is consistent with phishing and credential-harvesting campaigns.

Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for n20io.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
6 months
Registered Nov 2025
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports
Key findings
7 headline facts from open-web research
  • Domain age approximately 207 days (roughly 7 months); one scanner reported ~5 months in April 2026
  • Page title is "Telegram: Join Group Chat" with no description, consistent with a redirect or invite to a Telegram channel/group
  • Multiple security scanners (Gridinsoft, Scam-Detector) flag it as suspicious with low trust scores (19/100 cited)
  • Web3Scambox explicitly labels it a fraudulent site targeting users with cryptocurrency or money scams via fake offers
  • No business registration, reviews on Trustpilot/ScamAdviser, or positive mentions located
  • Registrant information points to Iceland; no transparent owner or company details available
  • No direct Reddit, Trustpilot, or BBB complaints indexed, but dedicated scam-report pages exist
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • Gridinsoftopen

    "Our review of N20io.com found Suspicious Website warning signs and a 19/100 trust score. The domain is 5 months old."

  • Scam-Detectoropen

    "Is n20io.com legit? Well, it's suspicious, as it received an overall low trust score based on our chart. We put to work 53 powerful factors to expose ..."

  • Web3Scamboxopen

    "n20io.com is a fraudulent website using deceptive means to scam its users of cryptocurrency or money either by promising a fake offer or service."

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our web research identified three scam-report entries for n20io.com. Gridinsoft flagged the domain as suspicious with a 19/100 trust score, noting the domain is approximately 5 months old. Scam-Detector reported it as suspicious based on 53 analysis factors. Web3Scambox explicitly classified it as a fraudulent site targeting users with cryptocurrency or money scams through deceptive offers. No positive reviews, business registrations, or legitimate mentions were found. The consistent fraud warnings across multiple independent security services, combined with the absence of any verifiable business footprint, indicate a high-confidence scam operation.

Antivirus Engines

Detection matrix · live
1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

0Malicious1Suspicious57Harmless92Engines
0
of 92
Gridinsoft
Suspicious· suspicious

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age6 months old
RegistrarSpaceship, Inc.
RegisteredNov 14, 2025
ExpiresNov 14, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · R13
ExpiresJul 21, 2026 (41d)
Self-signedNo
Hosting & Technology
HostingAmazon Technologies Inc.
Server locationUS
Web servernginx/1.30.1

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1302http://n20io.com/
  • 2200https://t.me/%2ByFRqN8o0g_I0ZDEycross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file3
ISPAmazon Technologies Inc.
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat n20io.com as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked n20io.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • n20io.com currently scores 52/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. n20io.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R13, expiring in 41 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • n20io.com is 6 months old, registered on 11/14/2025 through Spaceship, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 1 out of 92 antivirus engines in our malware network flagged n20io.com as malicious or suspicious. Even one detection is a meaningful signal.
  • No. n20io.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • n20io.com resolves to an IP operated by Amazon Technologies Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 10, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around n20io.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·n20io.com
SUSPICIOUS

This domain mimics a Telegram group-chat invite but multiple security scanners flag it as fraudulent, with reports linking it to cryptocurrency and money scams via deceptive offers. Do not click the join link or enter any personal information.

Do not click the join link or enter any personal information on this page. If you received an invite to this group, report it to Telegram as a phishing attempt. Block the domain in your browser and report it to your email provider if you received the link via email.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.