Analysis for

orbifi.io

Flare Score

Warning

FlareAI™ Summary

Orbi Finance (orbifi.io) promises 84% APY on crypto deposits, offering a platform for earning yield on ETH and XRP. The site uses React and supports user accounts and payment processing. While it has a valid SSL certificate, the domain is only 2 months old. Blacklist status is unverified. With a FlareScore of 74/100, a risk "warning" is indicated. Users should proceed with caution and conduct thorough due diligence before investing.

-1.2%

than category average

United States

Server Country

2 months

Domain Age

Score Breakdown

How we calculated the Flare Score based on positive and negative signals.

Positive Signals

Valid SSL certificate from Let's Encrypt

Registered with reputable registrar (NameCheap, Inc.)

Good website performance

Contact information available

Negative Signals

Very new domain (less than 3 months old)

WHOIS information hidden (privacy protection enabled)

Weak or missing email security configuration

Missing important security headers

Pro Tip: A valid SSL certificate is a basic requirement for any trustworthy site, but it doesn't guarantee the site is not a scam.

SSL & Security

SSL certificate and security headers configuration

Security Score

60/100

✓ Valid SSL (40) ✗ HSTS (20) ✗ CSP (20) ✓ X-Frame (20)

SSL Certificate

Issuer

Let's Encrypt

Valid From

Dec 16, 2025

Valid Until

Mar 16, 2026

32 days remaining

Security Headers

X-Frame-Options

How Was This Calculated?

Transparency into our FlareScore™ methodology and data sources used for this analysis.

orbifi.io Analysis

FlareScore™: 74/100 (Warning Risk)

Our analysis of orbifi.io identified 5 positive security indicators and 4 potential concerns. The FlareScore™ rating combines technical security measures, domain reputation, and content analysis.

SSL Certificate Analysis

Domain Age: 3 months

AI Content Review

6 DNS Records

Analysis Sources

• WHOIS: NameCheap, Inc.
• SSL: Let's Encrypt
• DNS: 6 records analyzed
• Content: Visual & text analysis

Last Checked

Jan 22, 2026
2 weeks ago

Transparency Note: Our analysis is based on publicly available data and automated scanning. For detailed methodology and accuracy metrics, visit our methodology page.

Domain & WHOIS Information

Domain Age

3 months

Registered Nov 12, 2025

Low Trust

Nov 2025 Expires Nov 2026

New domain (less than 6 months old) - Exercise caution

Registrar

NameCheap

Registration Date

Nov 12, 2025 (2 months ago)

Last Updated

Dec 16, 2025

Expiration Date

Nov 12, 2026 (273 days remaining)

Server Location

United States

Abuse Contact

[email protected]

+1.9854014545

Domain Name: orbifi.io
Registry Domain ID: REDACTED
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: https://www.namecheap.com/
Updated Date: 2025-12-16T18:06:21Z
Creation Date: 2025-11-12T21:18:58Z
Registry Expiry Date: 2026-11-12T21:18:58Z
Registrar: NameCheap, Inc.
Registrar IANA ID: 1068
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.9854014545
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: REDACTED
Registrant Name: REDACTED
Registrant Organization: Privacy service provided by Withheld for Privacy ehf
Registrant Street: REDACTED
Registrant City: REDACTED
Registrant State/Province: Capital Region
Registrant Postal Code: REDACTED
Registrant Country: IS
Registrant Phone: REDACTED
Registrant Phone Ext: REDACTED
Registrant Fax: REDACTED
Registrant Fax Ext: REDACTED
Registrant Email: REDACTED
Registry Admin ID: REDACTED
Admin Name: REDACTED
Admin Organization: REDACTED
Admin Street: REDACTED
Admin City: REDACTED
Admin State/Province: REDACTED
Admin Postal Code: REDACTED
Admin Country: REDACTED
Admin Phone: REDACTED
Admin Phone Ext: REDACTED
Admin Fax: REDACTED
Admin Fax Ext: REDACTED
Admin Email: REDACTED
Registry Tech ID: REDACTED
Tech Name: REDACTED
Tech Organization: REDACTED
Tech Street: REDACTED
Tech City: REDACTED
Tech State/Province: REDACTED
Tech Postal Code: REDACTED
Tech Country: REDACTED
Tech Phone: REDACTED
Tech Phone Ext: REDACTED
Tech Fax: REDACTED
Tech Fax Ext: REDACTED
Tech Email: REDACTED
Name Server: ns1.dns-parking.com
Name Server: ns2.dns-parking.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-01-22T10:41:04Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the registry database. The data in this record is provided by Identity Digital or the Registry Operator for informational purposes only, and accuracy is not guaranteed. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. When using the Whois service, please consider the following: The Whois service is not a replacement for standard EPP commands to the SRS service. Whois is not considered authoritative for registered domain objects. The Whois service may be scheduled for downtime during production or OT&E maintenance periods. Queries to the Whois services are throttled. If too many queries are received from a single IP address within a specified time, the service will begin to reject further queries for a period of time to prevent disruption of Whois service access. Abuse of the Whois system through data mining is mitigated by detecting and limiting bulk query access from single sources. Where applicable, the presence of a [Non-Public Data] tag indicates that such data is not made publicly available due to applicable data privacy laws or requirements. Should you wish to contact the registrant, please refer to the Whois records available through the registrar URL listed above. Access to non-public data may be provided, upon request, where it can be reasonably confirmed that the requester holds a specific legitimate interest and a proper legal basis for accessing the withheld data. Access to this data provided by Identity Digital can be requested by submitting a request via the form found at https://www.identity.digital/about/policies/whois-layered-access/. The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name. Identity Digital Inc. and Registry Operator reserve the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.

DNS Configuration

Domain Name System records and email security configuration

Email Security

SPF

DKIM

DMARC

None

TXT

HTTP Headers

Key server response headers for security analysis.

Security (3)

Clickjacking Protection

MIME Sniffing Protection

XSS Filter

Web Server

                                            nginx/1.24.0 (Ubuntu...
                                        

Technology

                                            Next.js
                                        

Cache Policy

                                            s-maxage=31536000
                                        

{
    "Server": "nginx\/1.24.0 (Ubuntu)",
    "Date": "Thu, 22 Jan 2026 10:41:03 GMT",
    "Content-Type": "text\/html; charset=utf-8",
    "Transfer-Encoding": "chunked",
    "Connection": "keep-alive",
    "Vary": "rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding",
    "x-nextjs-cache": "HIT",
    "x-nextjs-prerender": "1",
    "x-nextjs-stale-time": "300",
    "X-Powered-By": "Next.js",
    "Cache-Control": "s-maxage=31536000",
    "ETag": "\"q0pk0gsr0811z5\"",
    "Content-Encoding": "gzip",
    "X-Frame-Options": "SAMEORIGIN",
    "X-Content-Type-Options": "nosniff",
    "X-XSS-Protection": "1; mode=block"
}

IP Geolocation

Server location and network information

United States

Phoenix

IP Address

31.97.214.138

ISP / Hosting

Hostinger US

Coordinates

33.4532, -112.0748

Country Code

View on Google Maps

Performance Metrics

Website loading speed and performance analysis

Fast

Load Time

0.77s

Excellent

Page Size

0.05MB

Optimized

Requests

Moderate

Overall

99/100

Performance score

Excellent! This website loads quickly and provides a great user experience.

Blacklist Check

Checking if this domain is listed on major security blacklists.

No blacklist data available yet. Website analysis may be in progress.

Discovered Subdomains

Publicly accessible subdomains associated with this domain.

www.orbifi.io

api.orbifi.io

Privacy & Trackers

2 Trackers Found

Facebook Pixel

General

Cloudflare

General

These trackers may be used for analytics, advertising, or site functionality.

Website Screenshot

In-Depth Analysis

Overview

Orbi Finance (orbifi.io) advertises itself as a cryptocurrency yield platform, offering a high 84% APY (7% monthly) on ETH and XRP deposits with no lock-up periods and a low $100 minimum. The site is built using React.

Security Assessment

The website uses a valid SSL certificate issued by Let's Encrypt, ensuring encrypted communication. However, the domain is only 2 months old, which is a significant red flag. Google Safe Browsing verification is unavailable, preventing immediate confirmation of its safety. The registrar is NameCheap, and the site is hosted in the United States by Hostinger US.

Trust Level

The FlareScore of 74/100 (warning) indicates a moderate risk level. The primary concerns are the extremely high APY which is unsustainable, the new domain age, and the unavailable Google Safe Browsing status. While a privacy policy exists and SSL is valid, these are standard features and don't negate the higher-risk factors.

Recommendations

Exercise extreme caution. Avoid depositing any cryptocurrency into Orbi Finance until further due diligence is performed. The promised returns are likely unsustainable and indicative of a Ponzi scheme. Research the platform thoroughly, look for independent reviews, and verify the legitimacy of the team and their claims. The domain age alone should deter investment.

User Reviews and Complaints

Share your experience with this site or ask questions. Your comments help the community.

Sign in to Share Your Experience

Join our community to leave reviews and help others make informed decisions.

No reviews yet.

Is This Your Website?

Claim your profile to respond to reviews and build trust with your audience.