Offlineparked Snyfer Research Team

Published 2026-09-12Updated 2026-09-12Scan ID e509c68b83d541fdb799d08dca81fe18

efa-pro.store

Is efa-pro.store a scam?

Name: Forensic scan report for efa-pro.store
Creator: Snyfer
License: https://snyfer.com/terms-conditions

High Risk01/ 100

0-2425-4445-6970-8485-100

Think you may have lost money to this site?

Tell us what happened and get free advice on your case. It is confidential.

Get help

The site

What this site
actually is.

Domain is listed for sale

Page capture

Screenshot unavailable

Identity

IP: 46.62.237.138
ASN: AS24940
Country: Finland
Registrar: VIRTUA DRUG Kutatási Szolgáltató Korlátolt Felelősségű Társaság
Server: cloudflarearchive
Hosting: Hetzner Online GmbH
Tech detected: 3

The verdict

The score is not
an opinion.

Every domain starts at 100. 5 scoring chains fired against efa-pro.store, and every one of them is listed below with the tier it reached. It is a measurement, not a ruling on whether the business is legitimate.

Trust Score: the full methodology and every weight

Triggered findings

Regulatory Tier 1
Scam Farm Tier 1
Parked Domain Tier 2
SSL Tier 2
WHOIS Tier 1

The record

How it got there,
and where it sits.

The score across every scan we hold, the eight signal families behind the current one, and the dates the engine recorded on the way.

Signal profile data

Maturity: 18 out of 100. Domain age unknown
AV clarity: 100 out of 100. 0 of 89 engines flag it
Regulators: 65 out of 100. 1 regulator warning
Network: 61 out of 100. Linked to 1 domain
Blacklist: 100 out of 100. Not blacklisted
Trust zone: 50 out of 100. .store top-level domain
Infra: 60 out of 100. Valid SSL · 3 tech detected
Hosting: 75 out of 100. Hosted in FI

Domain history

Recorded scans: Sep 12, 2026 - Sep 12, 2026

Score history data

Recorded scan scores
Date (UTC)	Score	Verdict
Sep 12, 2026	1/100	High Risk
Sep 12, 2026	1/100	High Risk

FEB 262027Domain expiresWHOISDomain efa-pro.store is set to expire.
SEP 302026SSL certificate expiresSSL CheckSSL certificate will expire.
SEP 122026Scam network detectedThreat GraphLinked to 1 domains in a known scam network.
SEP 122026First scansnyferTrust score 1 out of 100.
JUL 22026SSL certificate issuedSSL CheckSSL certificate issued by Google Trust Services.
JUN 102026Domain updatedWHOISefa-pro.store WHOIS record was updated.
FEB 262026Domain createdWHOISDomain efa-pro.store was registered.
JAN 12025Warned by SC_MYRegulator SC_MY (MY) published an investor warning for efa-pro.store.

Signals

We are not the first
to say it.

1 independent source has flagged this domain: security vendors, public authorities that have published warnings, and blocklist feeds. Nothing that found it clean is listed.

Regulators

SC_MY - Malaysia01/01/25View

Connections

One domain is never
just one domain.

Domains our engine ties to this one through shared fingerprints, not through a shared host.

Cluster map

Connected domain data (2)

Where it lives

Where it actually
answers from.

Hosting, registrar, certificate and nameservers, as our crawler measured them rather than as the site describes itself.

Registration

Registrar: VIRTUA DRUG Kutatási Szolgáltató Korlátolt Felelősségű Társaság
Created: Feb 26, 2026
Expires: Feb 26, 2027
Age: -
Privacy: enabled

ns1.dns-redirect.comns2.dns-redirect.com

Hosting

archive · Sep 12, 2026

IP: 46.62.237.138
ASN: AS24940
Provider: Hetzner Online GmbH
Country: Finland
City: Helsinki
Server: cloudflare
Proxied: direct

SSL certificate

Issuer: Google Trust Services
Protocol: TLSv1.3
Valid: yes
Expires: Sep 30, 2026

Technologies

archive · Sep 12, 2026

Cloudflare· cdn
Tailwind CSS· css-framework
PHP· language

Server location

archive · Sep 12, 2026

60.169, 24.935© OpenStreetMap

Location: Helsinki, Finland
IP: 46.62.237.138
Hosting: Hetzner Online GmbH · AS24940

Security headers

archive · Sep 12, 2026

content_security_policyNot set
strict_transport_securitymax-age=31536000; includeSubDomains; preload
x_frame_optionsDENY
x_content_type_optionsnosniff
referrer_policystrict-origin
permissions_policygeolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x_xss_protection1; mode=block
cross_origin_opener_policyNot set

Uptime history

September 2026

2026-09-011 unknown
2026-09-022 unknown
2026-09-033 unknown
2026-09-044 unknown
2026-09-055 unknown
2026-09-066 unknown
2026-09-077 unknown
2026-09-088 unknown
2026-09-099 unknown
2026-09-1010 unknown
2026-09-1111 unknown
2026-09-1212 online
2026-09-1313 unknown
2026-09-1414 unknown
2026-09-1515 unknown
2026-09-1616 unknown
2026-09-1717 unknown
2026-09-1818 unknown
2026-09-1919 unknown
2026-09-2020 unknown
2026-09-2121 unknown
2026-09-2222 unknown
2026-09-2323 unknown
2026-09-2424 unknown
2026-09-2525 unknown
2026-09-2626 unknown
2026-09-2727 unknown
2026-09-2828 unknown
2026-09-2929 unknown
2026-09-3030 unknown

online (1)offline (0)

Daily availability data

Recorded daily availability
Date (UTC)	Status	HTTP
2026-09-12	online	200

Exit scam indicator

Daily availability: Sep 12, 2026

Daily offline streak data

Daily consecutive offline days
Date (UTC)	Status	Streak
2026-09-12	online	0 days

max consecutive offline0 days

current streak0 days

Under the page

What the page loads
behind your back.

Everything it requested, everything it stored on the visitor's machine, and every host it talked to while doing it.

Page timing

archive · Sep 12, 2026

0.46stotal page load

DNS Lookup5ms

TCP Connect99ms

TLS Handshake36ms

TTFB137ms

Content Download3ms

DOM Loaded336ms

Page Load459ms

Resources

archive · Sep 12, 2026

63 KB12 requests

scripts3 · 25%

images2 · 17%

fonts2 · 17%

documents2 · 17%

xhr1 · 8%

other1 · 8%

stylesheets1 · 8%

Redirect chain

archive · Sep 12, 2026

1expireddomains.com

Cookies

archive · Sep 12, 2026

Secure

HttpOnly

Session

name	domain	flags
PHPSESSID	expireddomains.com	H
cf_clearance	.expireddomains.com	SH

Network stats

12
total requests: 63 KB
total bytes: 0
failed requests: 4
unique domains: 92%
third party: 100%
https

HTTP transactions

Raw scan data

DownloadMarkdown JSON CSV STIX 2.1

{
  "domain": "efa-pro.store",
  "scanId": "e509c68b83d541fdb799d08dca81fe18",
  "status": "completed",
  "indexable": false,
  "publicNotice": null,
  "completedAt": "2026-09-12T03:37:24.663Z",
  "ageDays": 0,
  "fresh": true,
  "verdict": "dangerous",
  "trustScore": 1,
  "badges": [
    {
      "name": "regulatory_tier1",
      "chain": "regulatory",
      "tier": 1,
      "maxTier": 4,
      "score": -70,
      "description": "Flagged by 1 financial regulator"
    },
    {
      "name": "scam_farm_tier1",
      "chain": "scam_farm",
      "tier": 1,
      "maxTier": 4,
      "score": -21,
      "description": "Shares code with 1-2 domains"
    },
    {
      "name": "site_status_tier2",
      "chain": "site_status",
      "tier": 2,
      "maxTier": 2,
      "score": -9,
      "description": "Website is unreachable or down"
    },
    {
      "name": "ssl_tier2",
      "chain": "ssl",
      "tier": 2,
      "maxTier": 3,
      "score": -2,
      "description": "SSL invalid or expired"
    },
    {
      "name": "whois_privacy_tier1",
      "chain": "whois_privacy",
      "tier": 1,
      "maxTier": 1,
      "score": 0,
      "description": "WHOIS privacy protection enabled"
    }
  ],
  "reachable": false,
  "unreachableReason": "The domain name does not resolve to a server.",
  "category": "parked",
  "categoryReasoning": "Domain is listed for sale",
  "regulatorFlagged": true,
  "regulators": [
    {
      "name": "SC_MY",
      "country": "MY",
      "url": "https://www.sc.com.my/investor-alert-list#alert-401cafcc-7d57-45b6-9f8b-77feda2f5c04",
      "warningDate": "2025-01-01T00:00:00.000Z"
    }
  ],
  "contacts": {
    "emails": [],
    "phones": [],
    "addresses": []
  },
  "technologies": [
    {
      "name": "Cloudflare",
      "category": "cdn"
    },
    {
      "name": "Tailwind CSS",
      "category": "css-framework"
    },
    {
      "name": "PHP",
      "category": "language"
    }
  ],
  "antivirus": {
    "detections": [],
    "enginesTotal": 89,
    "permalink": "https://www.virustotal.com/gui/domain/ww2.efa-pro.store",
    "scannedAt": "2026-09-12T03:37:22.695Z"
  },
  "blacklists": [
    {
      "provider": "google_safe_browsing",
      "flagged": false,
      "threats": []
    }
  ],
  "registration": {
    "registrar": "VIRTUA DRUG Kutatási Szolgáltató Korlátolt Felelősségű Társaság",
    "registrarIanaId": null,
    "createdAt": "2026-02-26T08:45:01.000Z",
    "updatedAt": "2026-06-10T10:16:31.099Z",
    "expiresAt": "2027-02-26T23:59:59.000Z",
    "ageDays": null,
    "ageText": null,
    "privacyProtected": true,
    "nameservers": [
      "ns1.dns-redirect.com",
      "ns2.dns-redirect.com"
    ]
  },
  "certificate": {
    "issuer": "Google Trust Services",
    "validFrom": "2026-07-02T08:29:59.000Z",
    "validUntil": "2026-09-30T09:29:48.000Z",
    "valid": true,
    "protocol": "TLSv1.3"
  },
  "hosting": {
    "ip": "46.62.237.138",
    "countryCode": "FI",
    "countryName": "Finland",
    "city": "Helsinki",
    "provider": "Hetzner Online GmbH",
    "asn": 24940,
    "serverSoftware": "cloudflare",
    "mapImageUrl": null,
    "latitude": 60.1695,
    "longitude": 24.9354,
    "behindCloudflare": false
  },
  "timing": {
    "dnsMs": 5,
    "connectMs": 99,
    "tlsMs": 36,
    "ttfbMs": 137,
    "downloadMs": 3,
    "domReadyMs": 336,
    "loadCompleteMs": 459
  },
  "resources": [
    {
      "kind": "scripts",
      "count": 3,
      "bytes": 0
    },
    {
      "kind": "images",
      "count": 2,
      "bytes": 15982
    },
    {
      "kind": "fonts",
      "count": 2,
      "bytes": 48616
    },
    {
      "kind": "documents",
      "count": 2,
      "bytes": 88
    },
    {
      "kind": "xhr",
      "count": 1,
      "bytes": 0
    },
    {
      "kind": "other",
      "count": 1,
      "bytes": 151
    },
    {
      "kind": "stylesheets",
      "count": 1,
      "bytes": 0
    }
  ],
  "networkStats": {
    "totalRequests": 12,
    "totalBytes": 64837,
    "failedRequests": 0,
    "uniqueDomains": 4,
    "thirdPartyRatio": 0.9167,
    "httpsPercentage": 100
  },
  "cookies": [
    {
      "name": "PHPSESSID",
      "domain": "expireddomains.com",
      "secure": false,
      "httpOnly": true,
      "expiresAt": null
    },
    {
      "name": "cf_clearance",
      "domain": ".expireddomains.com",
      "secure": true,
      "httpOnly": true,
      "expiresAt": null
    }
  ],
  "identity": {
    "finalUrl": "https://ww2.efa-pro.store/",
    "brandName": null,
    "faviconUrl": "/api/scan/favicon/e509c68b83d541fdb799d08dca81fe18"
  },
  "telemetry": {
    "statusCode": 0,
    "durationMs": 46398,
    "scraper": "patchright",
    "attempts": 1,
    "source": "batch",
    "contentType": "text/html; charset=UTF-8"
  },
  "securityHeaders": [
    {
      "key": "content_security_policy",
      "present": false,
      "value": null
    },
    {
      "key": "strict_transport_security",
      "present": true,
      "value": "max-age=31536000; includeSubDomains; preload"
    },
    {
      "key": "x_frame_options",
      "present": true,
      "value": "DENY"
    },
    {
      "key": "x_content_type_options",
      "present": true,
      "value": "nosniff"
    },
    {
      "key": "referrer_policy",
      "present": true,
      "value": "strict-origin"
    },
    {
      "key": "permissions_policy",
      "present": true,
      "value": "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()"
    },
    {
      "key": "x_xss_protection",
      "present": true,
      "value": "1; mode=block"
    },
    {
      "key": "cross_origin_opener_policy",
      "present": false,
      "value": null
    }
  ],
  "redirects": [
    {
      "from": "https://efa-pro.store/",
      "to": "https://expireddomains.com/domain/efa-pro.store?utm_source=redi",
      "statusCode": null
    }
  ],
  "transactions": [
    {
      "url": "https://efa-pro.store/",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 301,
      "bytes": 88,
      "thirdParty": false
    },
    {
      "url": "https://expireddomains.com/domain/efa-pro.store?utm_source=redi",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://expireddomains.com/cdn-cgi/speculation",
      "method": "GET",
      "resourceType": "other",
      "statusCode": 200,
      "bytes": 151,
      "thirdParty": true
    },
    {
      "url": "https://new.expireddomains.com/__l5e/assets-v1/45c7a17d-697e-4ba8-94be-57e5b2785836/ed-logo-wordmark.png",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 15982,
      "thirdParty": true
    },
    {
      "url": "https://expireddomains.com/fonts/fira-sans-400.woff2",
      "method": "GET",
      "resourceType": "font",
      "statusCode": 200,
      "bytes": 23872,
      "thirdParty": true
    },
    {
      "url": "https://expireddomains.com/fonts/dm-serif-display-400.woff2",
      "method": "GET",
      "resourceType": "font",
      "statusCode": 200,
      "bytes": 24744,
      "thirdParty": true
    },
    {
      "url": "https://expireddomains.com/css/lander.css",
      "method": "GET",
      "resourceType": "stylesheet",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://invoke.giantpanda.media/bb50b5b7.js",
      "method": "GET",
      "resourceType": "script",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://expireddomains.com/domain/efa-pro.store/virtua",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://expireddomains.com/cdn-cgi/challenge-platform/scripts/jsd/main.js",
      "method": "GET",
      "resourceType": "script",
      "statusCode": 302,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://expireddomains.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?",
      "method": "GET",
      "resourceType": "script",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://expireddomains.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.15222439818951117:1789171524:4rSZuBBqf5UzP7zFOD5P3oSkgp_zilGStaLymT03yd8/a39b1298ad4ab92a",
      "method": "POST",
      "resourceType": "xhr",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    }
  ],
  "hasCapture": false,
  "archive": {
    "server_info": {
      "source": "frozen",
      "scanId": "bc9b0d98237f49dbb25f7e798d341b02",
      "observedAt": "2026-09-12T01:18:10.208Z"
    },
    "technologies": {
      "source": "frozen",
      "scanId": "bc9b0d98237f49dbb25f7e798d341b02",
      "observedAt": "2026-09-12T01:18:10.208Z"
    },
    "headers": {
      "source": "frozen",
      "scanId": "bc9b0d98237f49dbb25f7e798d341b02",
      "observedAt": "2026-09-12T01:18:10.208Z"
    },
    "timing": {
      "source": "frozen",
      "scanId": "bc9b0d98237f49dbb25f7e798d341b02",
      "observedAt": "2026-09-12T01:18:10.208Z"
    },
    "http_transactions": {
      "source": "frozen",
      "scanId": "bc9b0d98237f49dbb25f7e798d341b02",
      "observedAt": "2026-09-12T01:18:10.208Z"
    },
    "redirects": {
      "source": "frozen",
      "scanId": "bc9b0d98237f49dbb25f7e798d341b02",
      "observedAt": "2026-09-12T01:18:10.208Z"
    },
    "cookies": {
      "source": "frozen",
      "scanId": "bc9b0d98237f49dbb25f7e798d341b02",
      "observedAt": "2026-09-12T01:18:10.208Z"
    },
    "screenshot_path": {
      "source": "frozen",
      "scanId": "bc9b0d98237f49dbb25f7e798d341b02",
      "observedAt": "2026-09-12T01:18:10.208Z"
    }
  },
  "networkSize": 1
}

From readers

What people who
were there told us.

Complaints and first-hand accounts sent to us about this domain. Read by a person before publication, never posted automatically.

0 reports for this domain

Submit a report

No reports yet

Be the first to share what happened with this site: a withdrawal that will not process, a refund you never received, an account you can no longer reach. Reports are pre-moderated and anonymous by default.

Submit the first report

Is efa-pro.store a scam?

What this site actually is.

Page capture

Identity

The score is not an opinion.

Triggered findings

How it got there, and where it sits.

Domain history

We are not the first to say it.

Regulators

One domain is never just one domain.

Cluster map

Where it actually answers from.

Registration

Hosting

SSL certificate

Technologies

Server location

Security headers

Uptime history

Exit scam indicator

What the page loads behind your back.

Page timing

Resources

Redirect chain

Cookies

Network stats

HTTP transactions

Raw scan data

What people who were there told us.

No reports yet

What this site
actually is.

The score is not
an opinion.

How it got there,
and where it sits.

We are not the first
to say it.

One domain is never
just one domain.

Where it actually
answers from.

What the page loads
behind your back.

What people who
were there told us.