Security

Security notice

Last updated October 8, 2026

Scammers sometimes pretend to be hosting companies to steal accounts, servers or card details. This page explains how to tell a real IronVault message from a fake one, and what to do if something looks wrong.

Our email addresses

We only send email from addresses ending in @ironvaulthost.com:

• noreply@ironvaulthost.com for automatic emails: sign-up, password resets, ticket replies, server notices and receipts.
• hello@ironvaulthost.com for general questions and sales.
• billing@ironvaulthost.com for invoices and payment questions.
• privacy@ironvaulthost.com for privacy and data requests.

Look closely at the full address, not just the name. Lookalike addresses such as ironvault-host.com, ironvaulthost.co, ironvau1thost.com or a free mail account like Gmail are not us.

What we will never ask for

• Your password, by email, Discord DM or anywhere else. Staff can help you without it.
• Your two-factor (2FA) codes or backup codes. Nobody at IronVault needs them, ever.
• Your card number, CVC or bank login in an email, DM or ticket message.
• Payment by gift cards, crypto to a personal wallet, or a "friends and family" transfer to a person.

Where payments happen

All payments happen on ironvaulthost.com or on Stripe's own checkout and billing pages (addresses starting with checkout.stripe.com, billing.stripe.com or buy.stripe.com). To see your invoices or change your card, go to ironvaulthost.com/billing yourself rather than following a link you were sent.

Discord: staff never DM you first about payment

• Our support replies come from the IronVault bot in your DMs (after you open a ticket) or inside your own private ticket thread. A staff member will never DM you out of the blue asking you to pay, "verify" your account or log in somewhere.
• Anyone offering a discount, a refund or a free server in a DM, with a link to pay or log in, is not IronVault.
• Ignore DMs that say your server or account will be deleted unless you act right now. Real notices also appear in your client area and as a ticket at ironvaulthost.com/support.

How to check someone really is staff

• In our Discord server, click their name: real staff have a staff role from the server, and their name shows in the staff section of the member list. Display names can be copied, so check the role, not just the name or picture.
• Real staff can see your ticket. Ask them to reply on your ticket at ironvaulthost.com/support. Whatever they write there comes from us.
• Still not sure? Open a ticket yourself and ask whether that person works for IronVault. We will tell you.

Report a suspicious message

If you got an email, DM or link that claims to be from IronVault and you're not sure about it:

• Open a Security / suspicious message ticket (also on the Discord ticket panel), or email hello@ironvaulthost.com.
• Include a screenshot and, for email, the sender's full address. Don't forward any password or code.
• If you already typed your password into a fake page, change it now in your client area, turn on two-factor authentication, and tell us in the ticket.

To check whether something is down before you trust a message about it, see our network status page.

Report abuse from one of our servers

Spam, phishing, malware, attacks or copyright infringement coming from an IronVault server or IP address? Use our abuse report form. No account is needed, and you get a case number by email.