Is tryora.de safe?
http://tryora.de/
Checked on
How we checked
Coverage: strong · 5 of 6 applicable core capabilities
- Antivirus (59 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Ora (tryora.de) sells a nicotine-free inhaler pen through a Shopify storefront that two independent site-checking services label a suspicious shop, while the store itself discloses no company identity.
tryora.de is a German-language Shopify shop for 'Ora', a pen-shaped smoke-free inhaler sold as a Starter Paket with flavours and a science page. The technical side is clean: no Safe Browsing warning, a valid encrypted connection and hosting on a CDN with no abuse history. The commercial side is not: one scanner service reports recurring complaints of payment without delivery and of a different or much lower-quality product, another gives the domain a trust score of 1 and says there is a strong likelihood it is a scam, and the reviewed pages show no company name, address, phone or email. A 4.1–4.2/5 an independent review platform's rating with merchant replies is the main counterweight, so this sits at the top of the High Risk band rather than lower.
Saved site captureCaptured safely during this scan1 antivirus engine flagged this URLGridinsoftSaved antivirus result from Nov 1, 2026At a glance
Saved with this scan; each value is explained in the sections below.
Domain age
Not available
Certificate
Valid
Expires Dec 13, 2026 (33d)Hosting
Canada (CA)
Shopify, Inc.Popularity
Not in the Cloudflare Radar top list
Antivirus
1/59
1 antivirus engine flagged this URLSafe Browsing
Not flagged
Not flagged on major threat listsCommunity
No reviews yet
Checked
Nov 10, 2026
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 44/100
High Risk covers scores 21–44. 4 findings pulled the score down; 3 pushed it up.
What pulled the score down
- Moderate2 independent sources carry complaints or warnings about this site, including: "Tryora.de est signalé comme boutique suspecte. Les plaintes récurrentes concernent paiement sans livraison, produit différent ou qualité très inférieure."
- Moderate2 independent sources carry complaints or warnings about this site, including: "In summary, tryora.de has a very low trust score which indicates that there is a strong likelyhood the website is a scam."
- Moderate1 antivirus result marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- MinorThe reviewed page content names no company, address, phone or email; footer contacts were not reviewed because the page exceeded the reader's limit.
What pushed the score up
- SupportsNo Safe Browsing warning, a valid encrypted connection, and hosting with an abuse confidence score of 0/100 across 23 saved reports.
- SupportsAn independent review platform rates the shop 4.1–4.2/5 and the merchant replies to reviews, including a refusal of a guarantee claim over documentation conditions.
- SupportsThe .de registry's public lookup gives no registration date. The Internet Archive's only captures of the site's home page are from 2025 (first on January 20, 2025). That dates when the site was archived, not when the domain was registered.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor).
Lost money or shared details on tryora.de? Do this now
Act quickly: the first hours matter most for a chargeback.
- Call your bank or card issuer now
Ask them to dispute the charge or open a chargeback; the sooner you act, the better your odds. Card payments can often be reversed. Bank transfers and gift cards are harder, but report them to your bank too. Crypto payments usually cannot be reversed: report the wallet address and transaction ID to the exchange you sent from.
- Change any password you entered
If you entered a password on tryora.de, change it there and anywhere you reused it, and turn on two-factor authentication. Keep screenshots, order confirmations and messages as evidence.
- Report the site
Reports help get scam sites taken down faster and warn other people.
- Report the domain to its registrar
The registrar is the company that sold this domain. ICANN's lookup shows the registrar's abuse contact.
- Ignore anyone offering to recover your money
"Recovery" services or agents who contact you, or ask for a fee up front, are almost always a second scam aimed at victims. Your bank's dispute process and the official reporting services never charge a fee in advance.
Full answers about refunds and reporting are in the Safety FAQ below.
01 · Investigation Brief
Investigation Brief
tryora.de is a German-language Shopify shop for 'Ora', a pen-shaped smoke-free inhaler sold as a Starter Paket with flavours and a science page. The technical side is clean: no Safe Browsing warning, a valid encrypted connection and hosting on a CDN with no abuse history. The commercial side is not: one scanner service reports recurring complaints of payment without delivery and of a different or much lower-quality product, another gives the domain a trust score of 1 and says there is a strong likelihood it is a scam, and the reviewed pages show no company name, address, phone or email. A 4.1–4.2/5 an independent review platform's rating with merchant replies is the main counterweight, so this sits at the top of the High Risk band rather than lower.
Two independent site checks call this a suspicious shop
A live scanner page classifies tryora.de as a suspicious boutique and cites recurring complaints about paying without receiving delivery and about receiving a different or much lower-quality product than ordered. The same source notes that no contact for complaints was found.
A second service gives the domain a trust score of 1 and states there is a strong likelihood the site is a scam. It also points out that the shop uses an internal review system the owner can edit, prioritise or remove, which weakens on-site testimonials as proof of anything.
These are third-party assessments rather than a verified case file, and the shop's own pages were only partly read, so the exact scale of any delivery problem is not established here. They are still the strongest adverse evidence about how this shop treats paying customers.
No company, address or contact email on the pages reviewed
The reviewed page content names no operator: no company, no registration number, no postal address, no phone and no domain email. The page was longer than the reader's limit, so footer contact details were not reviewed — that means the absence is unconfirmed, not proven, but nothing in what was read identifies who is selling the product.
A third-party record states the domain was registered on 22 April 2025 with owner details not publicly accessible and no complaint contact found. The .de registry publishes no registration date, and Internet Archive captures of the homepage begin in January 2025, which dates archiving only, not registration.
The storefront is set to 'Vereinigte Staaten | EUR €' while presenting German-language pages and a German country selector, and an independent review platform company entry lists the contact as 'Etats-Unis - www.tryora.de'. A German-facing shop with a US region setting and no visible German legal disclosure is a poor basis for a warranty or returns claim.
Discount wheel, sitewide sale banner and a guarantee with conditions
The homepage runs a spin-the-wheel email capture offering 5–20% coupons valid for ten minutes and one use, alongside a persistent 'HERBST-SALE: Bis zu 60% Rabatt' bar that also appears on legal and shipping pages. The main purchase path is the 'Starter Paket' and a 'Mach den Wechsel' button, with a row of customer avatars and a '50K+' figure used as social proof.
On an independent review platform the shop rates 4.1–4.2/5 and replies to reviews, which is genuine counter-evidence. One of those replies refuses a guarantee claim because the customer did not meet a documentation condition, saying the guarantee cannot be honoured otherwise — so the money-back promise is conditional in practice.
Clean connection, but a saved scanner result marks the URL suspicious
The browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0/100 across 23 saved reports. Nothing here points to malware, a phishing page or a credential-harvesting checkout.
One saved antivirus observation marked the URL as suspicious, and that saved scan is stale, so it should be read as a dated signal rather than a current detection. Clean technical checks say the site will not infect a visitor; they say nothing about whether an order will arrive.
Why the score is 44
02 · Security Evidence
Security evidence
Antivirus Engines
1/ 93
detectionsSaved analysis from November 1, 2026 - stale
1 engine flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 1
- Total
- 93
- Suspicious1
- Clean58
- Undetected34
| Engine | Finding |
|---|---|
| GridinsoftSuspicious | suspicious |
All 93 engine results
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- Forcepoint ThreatSeekershopping
- Googleshopping
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed

Visual context from the captured page
Header shows the 'ORA' wordmark with navigation Home, Starter Paket, Geschmäcker, Wissenschaft, plus a country/language selector 'Deutschland | EUR €' and 'Deutsch'. Top announcement bar reads 'HERBST-SALE: Bis zu 60% Rabatt' with a close (X) button. A spin-the-wheel discount widget ('Rabatt gewinnen?', 'GEBEN SIE IHRE E-MAIL-ADRESSE EIN, UM EINEN RABATT ZU GEWINNEN!') with an email field and 'KOSTENLOS DREHEN!' button, offering 5–20% coupons valid 10 minutes for one-time use. Left side shows a row of customer avatar photos with '50K+ zuf...' and star icons next to headline text 'OHNE NI... OHNE SC... EINFACH...' and a 'Mach den Wechsel' button. Background photo shows a person holding a small pen-like device near their mouth, consistent with a smoke-free inhaler product.
What the captured page showed
5 observations- 01
Header shows the 'ORA' wordmark with navigation Home, Starter Paket, Geschmäcker, Wissenschaft, plus a country/language selector 'Deutschland | EUR €' and 'Deutsch'.
- 02
Top announcement bar reads 'HERBST-SALE: Bis zu 60% Rabatt' with a close (X) button.
- 03
A spin-the-wheel discount widget ('Rabatt gewinnen?', 'GEBEN SIE IHRE E-MAIL-ADRESSE EIN, UM EINEN RABATT ZU GEWINNEN!') with an email field and 'KOSTENLOS DREHEN!' button, offering 5–20% coupons valid 10 minutes for one-time use.
- 04
Left side shows a row of customer avatar photos with '50K+ zuf...' and star icons next to headline text 'OHNE NI... OHNE SC... EINFACH...' and a 'Mach den Wechsel' button.
- 05
Background photo shows a person holding a small pen-like device near their mouth, consistent with a smoke-free inhaler product.
Browser behavior
What our isolated browser recorded while it loaded the page. Host names only: no full addresses are published.
- Pop-ups
- 0
- Download attempts
- 0
- Notification prompts
- 0
- Navigations
- 1
- Other hosts contacted
- 15
Where the page went
- First loadtryora.deSame site
Hosts on our aggressive-advertising list
None contacted.
Test clicks
No test click was made on this page.
What the page says about itself
Quoted from the pages we read: the site's own words, not our findings.
- Page title
Ora – Deine natürliche Alternative zum Rauchen und Dampfen
- Meta description
Entdecke Ora, die innovative Lösung, um auf natürliche Weise mit dem Rauchen und Vaping aufzuhören. Unser Produkt bietet eine gesunde Alternative ohne Nikotin, Dampf oder Rauch und unterstützt Sie dabei, Ihre Gewohnheiten nachhaltig zu ändern.
Pages we read
- Main page/Read
- Terms/policies/terms-of-serviceRead
- Refund / returns policy/pages/widerrufsrechtRead
- Shipping policy/pages/versand-und-lieferungRead
- Contact page/pages/contactRead
03 · Investigation Story
Investigation story
What the site claims
Ora – Deine natürliche Alternative zum Rauchen und Dampfen
What we observed
The page content was captured and checked alongside 59 antivirus results.
What independent research found
8 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01A spin-the-wheel email capture offers 5–20% coupons valid ten minutes, and a 'bis zu 60% Rabatt' sale bar runs sitewide including on legal pages.
- 02The storefront is set to 'Vereinigte Staaten | EUR €' while serving German-language pages, and an independent review platform company entry lists the contact as 'Etats-Unis'.
- 03Header shows the 'ORA' wordmark with navigation Home, Starter Paket, Geschmäcker, Wissenschaft, plus a country/language selector 'Deutschland | EUR €' and 'Deutsch'.
- 04Left side shows a row of customer avatar photos with '50K+ zuf...' and star icons next to headline text 'OHNE NI... OHNE SC... EINFACH...' and a 'Mach den Wechsel' button.
- 05Background photo shows a person holding a small pen-like device near their mouth, consistent with a smoke-free inhaler product.
- Also 7 listed under Why 44/100 above
Web research findings
Independent findings for tryora.de, including public complaints, named review sources, registration records, and look-alike-domain evidence.
- Gridinsoftopen
"Tryora.de est signalé comme boutique suspecte. Les plaintes récurrentes concernent paiement sans livraison, produit différent ou qualité très inférieure."
- ScamAdviseropen
"In summary, tryora.de has a very low trust score which indicates that there is a strong likelyhood the website is a scam."
- ScamAdviseropen
"We discovered that this website is using an internal review system. An internal review system allows the owner of the website to edit, prioritize or remove reviews"
- Gridinsoftopen
"Ce domaine a été enregistré 22 avril 2025 à 07:07 par la société unknown et les informations sur le propriétaire ne sont pas accessibles publiquement. Aucun contact pour les réclamations trouvé."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domaintryora.de
- Redirects towww.tryora.de
- Hosted byShopify, Inc.
- Referencesfonts.shopifycdn.com · breatheora.comand 11 more
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
At the scan on Nov 10, 2026: 63% of the validity period had passed
Certificate issued for www.tryora.de.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Analytics and ads
- Google Tag Manager
- Microsoft Clarity
Chat, reviews and email
- Klaviyo
- Judge.me reviews
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://tryora.de/
- 2301https://tryora.de/
- 3200https://www.tryora.de/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Grouped by what each domain is for. in page: named in the page’s HTML. contacted: the browser loaded it while rendering the page. ad list: on our aggressive-advertising list.
Advertising1
- cdn.taboola.comcontacted
Analytics & tracking4
- api.config-security.comin pagecontacted
- clarity.msin pagecontacted
- conf.config-security.comin pagecontacted
- googletagmanager.comin pagecontacted
Payments1
- shop.appcontacted
CDN & fonts7
- assets.gemcommerce.comcontacted
- cdn.shopify.comin pagecontacted
- fonts.googleapis.comcontacted
- fonts.gstatic.comcontacted
- fonts.shopifycdn.comin page
- monorail-edge.shopifysvc.comin page
- otlp-http-production.shopifysvc.comcontacted
Chat & reviews5
- api.judge.mein page
- cdn.judge.mein page
- cdn1.judge.mein page
- judge.mein page
- static.klaviyo.comin pagecontacted
Other / unknown4
- admin.gojiberry.appcontacted
- app.getwoohoo.comcontacted
- breatheora.comin page
- ucarecdn.comcontacted
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 1 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Nov 1, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 10, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 10, 2026 |
| Visual evidence | 5 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 10, 2026 |
| Independent research | 8 independent findings were saved | Completed | Adverse | this scan · Nov 10, 2026 |
- Antivirus
- Result1 of 93 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Nov 1, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 10, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 10, 2026
- Visual evidence
- Result5 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 10, 2026
- Independent research
- Result8 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Nov 10, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is tryora.de a scam or a legit online store?
Is tryora.de safe to use?
What should I do if I already gave my details to tryora.de?
Can I get my money back from tryora.de?
I ordered from tryora.de but nothing arrived — is it a fake shop?
How do I report tryora.de?
Why does tryora.de look legitimate if it's a scam?
Has tryora.de been flagged by antivirus engines?
Is tryora.de on any phishing or malware blacklists?
How old is the tryora.de domain?
Does tryora.de have a valid SSL certificate?
How often is the tryora.de report updated?
08 · Final Verdict
Final verdict
Ora (tryora.de) sells a nicotine-free inhaler pen through a Shopify storefront that two independent site-checking services label a suspicious shop, while the store itself discloses no company identity.
tryora.de is a German-language Shopify shop for 'Ora', a pen-shaped smoke-free inhaler sold as a Starter Paket with flavours and a science page. The technical side is clean: no Safe Browsing warning, a valid encrypted connection and hosting on a CDN with no abuse history. The commercial side is not: one scanner service reports recurring complaints of payment without delivery and of a different or much lower-quality product, another gives the domain a trust score of 1 and says there is a strong likelihood it is a scam, and the reviewed pages show no company name, address, phone or email. A 4.1–4.2/5 an independent review platform's rating with merchant replies is the main counterweight, so this sits at the top of the High Risk band rather than lower.
09 · Community
Community
Are you the owner of tryora.de?Verify and reply