Is oray.com legit or a scam?
Official domain for Oray, a long-standing Chinese tech firm providing legitimate remote desktop and networking solutions with over 120 million registered users.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
The domain has been registered since 2001 and is operated by a verified, active Chinese corporation with significant capital. Our analysis shows it is the genuine home for popular tools like Sunlogin and Peanut Shell. While some third-party reports mention the software being used by external scammers for tech support fraud, the company itself is a legitimate service provider. It maintains a high global traffic rank and clean results across our antivirus network. The site also proactively warns users about fake clone sites that distribute malware.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for oray.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Domain registered in 2001 (over 25 years old), operated by Shanghai Best Oray Information S&T Co., Ltd. / 上海贝锐信息科技股份有限公司 since 2006.
- Provides legitimate remote desktop (向日葵/Sunlogin), DDNS (花生壳/Peanut Shell), and SD-WAN/VPN (蒲公英/Pugongying) services popular in China with 120M+ users and 1.5M+ enterprise clients.
- Scamadviser rates it as "Very Likely Safe" / legit with high traffic (Tranco ~500), long history, valid SSL; minor notes on hidden WHOIS and mixed reviews.
- Company publishes warnings about numerous fake/impersonating websites that distribute malware disguised as their software.
- Remote control tools like 向日葵 are frequently abused by scammers in "tech support" or "task reward" frauds to remotely control victims' devices and steal money (multiple Chinese police warnings).
- Registered as active Chinese joint-stock company with official business license; selected as national "Specialized and New Little Giant" enterprise in 2025.
- Customer complaints exist on Chinese platforms (e.g., service issues, refunds) but no evidence of the company itself operating as a scam.
上海贝锐信息科技股份有限公司 (Shanghai Berry Information Technology Co., Ltd.), registered 2006-04-30, capital 1000万 RMB, legal rep 陈宇晔, Shanghai Market Supervision Administration, passed 2025 national specialized SME review
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No postal address visible on the page.
- Phone number listed (400-601-0000).
Domain & Encryption
Redirect Chain
- 1302http://oray.com/
- 2200https://www.oray.com/cross-domain
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on oray.com and not a lookalike like o-ray.com.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on oray.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- oray.com passed our automated security checks with a trust score of 95/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. oray.com presents a valid TLSv1.2 certificate issued by DigiCert Inc · RapidSSL TLS RSA CA G1, expiring in 106 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- oray.com is 25.0 years old, registered on 6/24/2001 through Shanghai Best Oray Information S&T Co., Ltd.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 92 antivirus engines in our malware network report oray.com as clean.
- No. oray.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- oray.com resolves to an IP operated by Aliyun Computing Co., LTD in CN (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. oray.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.