gfo-xx.com scores 24 out of 100, rated High Risk. 1 regulator warnings, 0 antivirus detections. Last scanned Aug 5, 2026. Source: https://gfo-xx.com

Online Snyfer Research Team
Published Updated Scan ID 14e8f140718245eb83bf6a600c6246eb

gfo-xx.com

Is gfo-xx.com a scam?

High Risk24/ 100

0-2425-4445-6970-8485-100

Think you may have lost money to this site?

Tell us what happened and get free advice on your case. It is confidential.

Get help

The site

What this site
actually is.

Site flagged by Cloudflare as suspected phishing — actual content not accessible

Page capture

Screenshot unavailable

Identity

IP
172.67.146.44
ASN
AS13335
Country
United States
Domain age
6 months
Registrar
Cloudflare, Inc.
Server
cloudflare
Hosting
Cloudflare, Inc.
Tech detected
3

The verdict

The score is not
an opinion.

Every domain starts at 100. 2 scoring chains fired against gfo-xx.com, and every one of them is listed below with the tier it reached. It is a measurement, not a ruling on whether the business is legitimate.

Trust Score: the full methodology and every weight

Triggered findings

2
  • Regulatory Tier 1
  • Domain Age Tier 2

The record

How it got there,
and where it sits.

The score across every scan we hold, the eight signal families behind the current one, and the dates the engine recorded on the way.
Signal profile data
  • Maturity: 29 out of 100. 209 days old
  • AV clarity: 100 out of 100. 0 of 92 engines flag it
  • Regulators: 65 out of 100. 1 regulator warning
  • Network: 92 out of 100. No malicious neighbours
  • Blacklist: 70 out of 100. Listed on 1 feed
  • Trust zone: 74 out of 100. .com top-level domain
  • Infra: 60 out of 100. Valid SSL · 3 tech detected
  • Hosting: 75 out of 100. Hosted in US

Domain history

Recorded scans: Aug 5, 2026

Score history data
Recorded scan scores
Date (UTC) Score Verdict
Aug 5, 202624/100High Risk
  1. JAN 72027Domain expiresWHOISDomain gfo-xx.com is set to expire.
  2. OCT 12026SSL certificate expiresSSL CheckSSL certificate will expire.
  3. AUG 52026Listed on cloudflare phishingBlacklistgfo-xx.com was flagged by cloudflare phishing as of this scan.
  4. AUG 52026First scansnyferTrust score 24 out of 100.
  5. JUL 242026Warned by FCARegulator FCA (UK) published an investor warning for gfo-xx.com.
  6. JUL 32026SSL certificate issuedSSL CheckSSL certificate issued by Google Trust Services.
  7. JAN 72026Domain updatedWHOISgfo-xx.com WHOIS record was updated.
  8. JAN 72026Domain createdWHOISDomain gfo-xx.com was registered.

Signals

We are not the first
to say it.

2 independent sources have flagged this domain: security vendors, public authorities that have published warnings, and blocklist feeds. Nothing that found it clean is listed.

Regulators

Blacklists

  • Cloudflare Phishing · PhishingCloudflare listed

Where it lives

Where it actually
answers from.

Hosting, registrar, certificate and nameservers, as our crawler measured them rather than as the site describes itself.

Registration

Registrar
Cloudflare, Inc.
Created
Jan 7, 2026
Expires
Jan 7, 2027
Age
6m
Privacy
disabled
betty.ns.cloudflare.comrazvan.ns.cloudflare.com

Hosting

IP
172.67.146.44
Country
United States
City
San Francisco
Server
cloudflare
Proxied
behind Cloudflare

SSL certificate

Issuer
Google Trust Services
Protocol
TLSv1.3
Valid
yes
Expires
Oct 1, 2026

Technologies

  • Cloudflare· cdn
  • Tailwind CSS· css-framework
  • Cloudflare Turnstile· security

Server location

37.762, -122.397© OpenStreetMap
Location
San Francisco, United States
IP
172.67.146.44
Hosting
Cloudflare, Inc. · AS13335

Security headers

  • content_security_policydefault-src 'none'; script-src 'nonce-2Hxfm8FwnkjjSX89A0aD9o' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src '
  • strict_transport_securityNot set
  • x_frame_optionsNot set
  • x_content_type_optionsNot set
  • referrer_policysame-origin
  • permissions_policyaccelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*
  • x_xss_protectionNot set
  • cross_origin_opener_policysame-origin

Uptime history

September 2026
  • 2026-09-011 online
  • 2026-09-022 online
  • 2026-09-033 online
  • 2026-09-044 online
  • 2026-09-055 online
  • 2026-09-066 online
  • 2026-09-077 online
  • 2026-09-088 online
  • 2026-09-099 online
  • 2026-09-1010 online
  • 2026-09-1111 online
  • 2026-09-1212 online
  • 2026-09-1313 unknown
  • 2026-09-1414 unknown
  • 2026-09-1515 unknown
  • 2026-09-1616 unknown
  • 2026-09-1717 unknown
  • 2026-09-1818 unknown
  • 2026-09-1919 unknown
  • 2026-09-2020 unknown
  • 2026-09-2121 unknown
  • 2026-09-2222 unknown
  • 2026-09-2323 unknown
  • 2026-09-2424 unknown
  • 2026-09-2525 unknown
  • 2026-09-2626 unknown
  • 2026-09-2727 unknown
  • 2026-09-2828 unknown
  • 2026-09-2929 unknown
  • 2026-09-3030 unknown
online (12)offline (0)
Daily availability data
Recorded daily availability
Date (UTC) Status HTTP
2026-08-05online403
2026-08-06online403
2026-08-07online403
2026-08-08online403
2026-08-09online403
2026-08-10online403
2026-08-11online403
2026-08-12online403
2026-08-13online403
2026-08-14online403
2026-08-15online403
2026-08-16online403
2026-08-17online403
2026-08-18online403
2026-08-19online403
2026-08-20online403
2026-08-21online403
2026-08-22online403
2026-08-23online403
2026-08-24online403
2026-08-25online403
2026-08-26online403
2026-08-28online403
2026-08-29online403
2026-08-30online403
2026-08-31online403
2026-09-01online403
2026-09-02online403
2026-09-03online403
2026-09-04online403
2026-09-05online403
2026-09-06online403
2026-09-07online403
2026-09-08online403
2026-09-09online403
2026-09-10online403
2026-09-11online403
2026-09-12online403

Exit scam indicator

Daily availability: Aug 5, 2026 - Sep 12, 2026

Consecutive days offline across every day we hold, peaking at 0 days

Daily offline streak data
Daily consecutive offline days
Date (UTC) Status Streak
2026-08-05online0 days
2026-08-06online0 days
2026-08-07online0 days
2026-08-08online0 days
2026-08-09online0 days
2026-08-10online0 days
2026-08-11online0 days
2026-08-12online0 days
2026-08-13online0 days
2026-08-14online0 days
2026-08-15online0 days
2026-08-16online0 days
2026-08-17online0 days
2026-08-18online0 days
2026-08-19online0 days
2026-08-20online0 days
2026-08-21online0 days
2026-08-22online0 days
2026-08-23online0 days
2026-08-24online0 days
2026-08-25online0 days
2026-08-26online0 days
2026-08-28online0 days
2026-08-29online0 days
2026-08-30online0 days
2026-08-31online0 days
2026-09-01online0 days
2026-09-02online0 days
2026-09-03online0 days
2026-09-04online0 days
2026-09-05online0 days
2026-09-06online0 days
2026-09-07online0 days
2026-09-08online0 days
2026-09-09online0 days
2026-09-10online0 days
2026-09-11online0 days
2026-09-12online0 days
max consecutive offline0 days
current streak0 days

Under the page

What the page loads
behind your back.

Everything it requested, everything it stored on the visitor's machine, and every host it talked to while doing it.

Page timing

0.27stotal page load
DNS Lookup0ms
TCP Connect36ms
TLS Handshake36ms
TTFB35ms
Content Download3ms
DOM Loaded151ms
Page Load268ms

Resources

695 B11 requests
scripts2 · 18%
images2 · 18%
xhr2 · 18%
fetch2 · 18%
documents2 · 18%
stylesheets1 · 9%

Network stats

11
total requests
695 B
total bytes
3
failed requests
3
unique domains
73%
third party
100%
https

HTTP transactions

Raw scan data

{
  "domain": "gfo-xx.com",
  "scanId": "14e8f140718245eb83bf6a600c6246eb",
  "status": "completed",
  "indexable": false,
  "publicNotice": null,
  "completedAt": "2026-08-05T03:09:09.810Z",
  "ageDays": 38,
  "fresh": false,
  "verdict": "dangerous",
  "trustScore": 24,
  "badges": [
    {
      "name": "regulatory_tier1",
      "chain": "regulatory",
      "tier": 1,
      "maxTier": 4,
      "score": -70,
      "description": "Flagged by 1 financial regulator"
    },
    {
      "name": "domain_age_tier2",
      "chain": "domain_age",
      "tier": 2,
      "maxTier": 5,
      "score": -6,
      "description": "Domain < 1 year"
    }
  ],
  "reachable": true,
  "unreachableReason": null,
  "category": null,
  "categoryReasoning": "Site flagged by Cloudflare as suspected phishing — actual content not accessible",
  "regulatorFlagged": true,
  "regulators": [
    {
      "name": "FCA",
      "country": "UK",
      "url": "https://www.fca.org.uk/news/warnings/gfo-xxcom-clone-fca-authorised-firm",
      "warningDate": "2026-07-24T00:00:00.000Z"
    }
  ],
  "contacts": {
    "emails": [],
    "phones": [],
    "addresses": []
  },
  "technologies": [
    {
      "name": "Cloudflare",
      "category": "cdn"
    },
    {
      "name": "Tailwind CSS",
      "category": "css-framework"
    },
    {
      "name": "Cloudflare Turnstile",
      "category": "security"
    }
  ],
  "antivirus": {
    "detections": [],
    "enginesTotal": 92,
    "permalink": "https://www.virustotal.com/gui/url/aHR0cHM6Ly9nZm8teHguY29tLw",
    "scannedAt": "2026-08-05T03:08:53.548Z"
  },
  "blacklists": [
    {
      "provider": "google_safe_browsing",
      "flagged": false,
      "threats": []
    },
    {
      "provider": "cloudflare_phishing",
      "flagged": true,
      "threats": [
        "PHISHING"
      ]
    }
  ],
  "registration": {
    "registrar": "Cloudflare, Inc.",
    "registrarIanaId": "1910",
    "createdAt": "2026-01-07T12:34:15.000Z",
    "updatedAt": "2026-01-07T12:34:21.000Z",
    "expiresAt": "2027-01-07T12:34:15.000Z",
    "ageDays": 209,
    "ageText": "6m",
    "privacyProtected": false,
    "nameservers": [
      "betty.ns.cloudflare.com",
      "razvan.ns.cloudflare.com"
    ]
  },
  "certificate": {
    "issuer": "Google Trust Services",
    "validFrom": "2026-07-03T21:35:47.000Z",
    "validUntil": "2026-10-01T22:33:02.000Z",
    "valid": true,
    "protocol": "TLSv1.3"
  },
  "hosting": {
    "ip": "172.67.146.44",
    "countryCode": "US",
    "countryName": "United States",
    "city": "San Francisco",
    "provider": "Cloudflare, Inc.",
    "asn": 13335,
    "serverSoftware": "cloudflare",
    "mapImageUrl": null,
    "latitude": 37.7621,
    "longitude": -122.3971,
    "behindCloudflare": true
  },
  "timing": {
    "dnsMs": 0,
    "connectMs": 36,
    "tlsMs": 36,
    "ttfbMs": 35,
    "downloadMs": 3,
    "domReadyMs": 151,
    "loadCompleteMs": 268
  },
  "resources": [
    {
      "kind": "scripts",
      "count": 2,
      "bytes": 0
    },
    {
      "kind": "images",
      "count": 2,
      "bytes": 694
    },
    {
      "kind": "xhr",
      "count": 2,
      "bytes": 0
    },
    {
      "kind": "fetch",
      "count": 2,
      "bytes": 1
    },
    {
      "kind": "documents",
      "count": 2,
      "bytes": 0
    },
    {
      "kind": "stylesheets",
      "count": 1,
      "bytes": 0
    }
  ],
  "networkStats": {
    "totalRequests": 11,
    "totalBytes": 695,
    "failedRequests": 3,
    "uniqueDomains": 3,
    "thirdPartyRatio": 0.7273,
    "httpsPercentage": 100
  },
  "cookies": [],
  "identity": {
    "finalUrl": "https://gfo-xx.com/",
    "brandName": null,
    "faviconUrl": "/api/scan/favicon/14e8f140718245eb83bf6a600c6246eb"
  },
  "telemetry": {
    "statusCode": 403,
    "durationMs": 16770,
    "scraper": "patchright",
    "attempts": 1,
    "source": "single",
    "contentType": "text/html; charset=UTF-8"
  },
  "securityHeaders": [
    {
      "key": "content_security_policy",
      "present": true,
      "value": "default-src 'none'; script-src 'nonce-2Hxfm8FwnkjjSX89A0aD9o' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src '"
    },
    {
      "key": "strict_transport_security",
      "present": false,
      "value": null
    },
    {
      "key": "x_frame_options",
      "present": false,
      "value": null
    },
    {
      "key": "x_content_type_options",
      "present": false,
      "value": null
    },
    {
      "key": "referrer_policy",
      "present": true,
      "value": "same-origin"
    },
    {
      "key": "permissions_policy",
      "present": true,
      "value": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*"
    },
    {
      "key": "x_xss_protection",
      "present": false,
      "value": null
    },
    {
      "key": "cross_origin_opener_policy",
      "present": true,
      "value": "same-origin"
    }
  ],
  "redirects": [],
  "transactions": [
    {
      "url": "https://gfo-xx.com/",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 403,
      "bytes": 0,
      "thirdParty": false
    },
    {
      "url": "https://gfo-xx.com/cdn-cgi/styles/cf.errors.css",
      "method": "GET",
      "resourceType": "stylesheet",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": false
    },
    {
      "url": "https://challenges.cloudflare.com/turnstile/v0/api.js",
      "method": "GET",
      "resourceType": "script",
      "statusCode": 302,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/turnstile/v0/g/f70cb37711aa/api.js",
      "method": "GET",
      "resourceType": "script",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://gfo-xx.com/cdn-cgi/images/icon-exclamation.png?1376755637",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 452,
      "thirdParty": false
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/av0/rch/ltdls/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal?lang=auto",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/fo/1928726436:1785895529:nqLv97i_dPbrw_KHrr8-CKjPAxHvxUjmSP6rLQwwt18/a262999548fcd177/ayw9jKOq.pjx.HS52CK9ji.YVffXXp0OzTSqVWupHxQ-1785899333-1.2.1.1-RNhcu2ZfZyI326p_7Xhl25_2jf.hbnCJ5aLFftnFnQfBB6PughOXSni9PXKDIlEN",
      "method": "POST",
      "resourceType": "xhr",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://brunhild.challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/a262999548fcd177/ayw9jKOq.pjx.HS52CK9ji.YVffXXp0OzTSqVWupHxQ-1785899333-1.2.1.1-RNhcu2ZfZyI326p_7Xhl25_2jf.hbnCJ5aLFftnFnQfBB6PughOXSni9PXKDIlEN",
      "method": "GET",
      "resourceType": "fetch",
      "statusCode": null,
      "bytes": 0,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/a262999548fcd177/1785899334258/bea74c9c5ab4b43f3c770600c3fe7991ef7fc1aa6347cef22ae2d532de8b5737/xlThx2cLvtmOL4_uIRXadWtzkW3vvzfscJqukHXGnyU-1785899334-1.3.1.1-65fnd5Itg4BEEU2N5j9VLD3cBwaKrIuh.7sHHOdD5xi0_OhF_6OonACDSAuevjh4LsagZ3yzV4sIeDroMQqYinMnoEhb_ABGx4lN0vqPOv9YWycGOFCBBly6VlZ35vHSDIsneK5yqPa1OEstcXaSdoRje2AqNJB3VwjR736z_bvq3tU43qnDSR.xfn4leVeQ9QGLc4KHBmFOLZz9GRXVJeZ._Szg1N.5SJ9GI07wJdbGwU4fP_yb5tZl6hJODPTQmoDADg9CHYVbR2yPB4a9KsMk0v6EhrtQgIZcmtuX2RCjvpJnVdMxxXFz812y7cDkbIMPiKVAA6fZmrk9vZawipcKN1OF4SHoqzlJvCwl24ZNIi1Eu.MsK5QlydmhuVbvGsYUMjlV1dWs7QX9NV7sspreT.MivhMEn9ZFiUK8d8t8YEbPfRbVqmgl_ws2Fvpj9a.yNM4WjXGBLrWs04tiRd8yr031fyqgiVQ93F50AAnIkMYSc9x9ChohsoJgJBOIwqjGOFDqTUbE7ZCUQrwGgL2HUyAzVmVEu91j1A9A_85j8JubmCEPzJ8nKT6pNXYw5LaS3N3i_BNmp9y32zJ56KxGnZMu0qadB67_iLJPrLv_YQzmzH_WjfnP0S9m1dKehobFUNL2algezjcCVND9EdZmWVEeeu_RXxW6DFsPFyMc_LFt0cXrjW6ndoyWRIB5iV5ufwT.MjO1hkFUoudsvJfES8doy1MLsJ1zpypP4v_XOjfEM5t6gn62cQSHWonZi_bTDB_6lYS.bo4JN_fzihLcAyFJTfJDG8OtTVrEkgQRBsNU3XPBWnO6BvYM3uq1",
      "method": "GET",
      "resourceType": "fetch",
      "statusCode": 401,
      "bytes": 1,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/ci/a262999548fcd177/1785899334259/AHZKFhgfL198ZLkL54LXjozt2d2r9iK0CsX.XVHNR2M-1785899334-1.3.1.1-kXx0LAxSYvWMiWtoGp4ENsdBkwdDB2RnkJAqVNAVrtSk1u_CpvYqa55rb6AVsAzmwB0p_BQ5ysevV8c7Y.qKN8EqMptvvi4XMQsADQKs._23cspFFT3SZaO8UIn5_.Tf1Kerle2gIYPipJvPSJMDI7YfzL_qYjT4pfHNMPkvatkPY4.RLs3hvYrAuyabSi_KF3NxmdlPHdHdrr.9PxuTR2zcy4rGlOLVmtTadT3ybFxqOqFecne3pgawpMXyBYyzfjmDFPfcuoL7SDE8T0Ec4afXihp99s0LFy6f864rqTZPHrT3N80T02nF1tYQ6w347UCt6KptHCHcSrQPCv7yQ_T0xPnQ97xTCTFpI300vKaLERZhaEETFgt96lBN9IA1X7.Z6uxQPvCPNhInS319jwjacCq5UpSOqwfJkd1eD9Orf8Xs01pSyw1vpQ.zK0id7S0IPM8OtTHgMs0OfLTBeyNjW8Lih6baQ55stVH6dCL5oMyADqtoFygqhjMcW1Kf3UqUrJi98Bnr3bnEWAzEWT5Zh4gXpmGtu5W_UNdkLfWmDhf5Z.PLRL5LngRY.at0m6LjIp3mLnY9gVtlfznbNrCKqHY98vmm1XHexztFpFmswxS9rMi8XZ53F7eInjeYd8QbTsog8fSmJokW1WAv_hDY29YKwExYPxFs3bdA_QsDTmvKkc1HWoAs5VVcZIyzAvhzUFczBadczfoXhF5LAsBQFRr9yF4AXDi1zlpJI9M",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 242,
      "thirdParty": true
    },
    {
      "url": "https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/fo/1928726436:1785895529:nqLv97i_dPbrw_KHrr8-CKjPAxHvxUjmSP6rLQwwt18/a262999548fcd177/ayw9jKOq.pjx.HS52CK9ji.YVffXXp0OzTSqVWupHxQ-1785899333-1.2.1.1-RNhcu2ZfZyI326p_7Xhl25_2jf.hbnCJ5aLFftnFnQfBB6PughOXSni9PXKDIlEN",
      "method": "POST",
      "resourceType": "xhr",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": true
    }
  ],
  "hasCapture": false,
  "archive": {},
  "networkSize": 0
}

From readers

What people who
were there told us.

Complaints and first-hand accounts sent to us about this domain. Read by a person before publication, never posted automatically.
0 reports for this domain
Submit a report

No reports yet

Be the first to share what happened with this site: a withdrawal that will not process, a refund you never received, an account you can no longer reach. Reports are pre-moderated and anonymous by default.

Submit the first report