Is xto2au.com a scam? What our scan found

{
  "domain": "xto2au.com",
  "scanId": "625f2c1b8e554f7d89632657ddd1d15d",
  "status": "completed",
  "indexable": false,
  "publicNotice": null,
  "completedAt": "2026-08-07T00:18:32.143Z",
  "ageDays": 36,
  "fresh": false,
  "verdict": "dangerous",
  "trustScore": 1,
  "badges": [
    {
      "name": "regulatory_tier1",
      "chain": "regulatory",
      "tier": 1,
      "maxTier": 4,
      "score": -70,
      "description": "Flagged by 1 financial regulator"
    },
    {
      "name": "antivirus_tier1",
      "chain": "antivirus",
      "tier": 1,
      "maxTier": 4,
      "score": -21,
      "description": "Detected by 1-2 engines"
    },
    {
      "name": "scam_farm_tier1",
      "chain": "scam_farm",
      "tier": 1,
      "maxTier": 4,
      "score": -11,
      "description": "Shares code with 1-2 domains"
    },
    {
      "name": "site_status_tier2",
      "chain": "site_status",
      "tier": 2,
      "maxTier": 2,
      "score": -5,
      "description": "Website is unreachable or down"
    },
    {
      "name": "domain_age_tier4",
      "chain": "domain_age",
      "tier": 4,
      "maxTier": 5,
      "score": -1,
      "description": "Domain < 3 months"
    },
    {
      "name": "ssl_tier2",
      "chain": "ssl",
      "tier": 2,
      "maxTier": 3,
      "score": 0,
      "description": "SSL invalid or expired"
    }
  ],
  "reachable": false,
  "unreachableReason": "The site could not be reached during the analysis.",
  "category": null,
  "categoryReasoning": "Site blocked our scanner IP via Cloudflare WAF — content not accessible",
  "regulatorFlagged": true,
  "regulators": [
    {
      "name": "ASIC",
      "country": "AU",
      "url": "https://moneysmart.gov.au/check-and-report-scams/investor-alert-list#!xto-australia-xto2au-com--4488",
      "warningDate": "2026-07-24T00:00:00.000Z"
    }
  ],
  "contacts": {
    "emails": [],
    "phones": [],
    "addresses": []
  },
  "technologies": [
    {
      "name": "Cloudflare",
      "category": "cdn"
    },
    {
      "name": "Tailwind CSS",
      "category": "css-framework"
    }
  ],
  "antivirus": {
    "detections": [
      {
        "engine": "alphaMountain.ai",
        "result": "suspicious",
        "engineType": "security_vendor"
      },
      {
        "engine": "Fortinet",
        "result": "spam",
        "engineType": "antivirus"
      }
    ],
    "enginesTotal": 92,
    "permalink": "https://www.virustotal.com/gui/url/aHR0cHM6Ly94dG8yYXUuY29tLw",
    "scannedAt": "2026-08-07T00:18:31.216Z"
  },
  "blacklists": [
    {
      "provider": "google_safe_browsing",
      "flagged": false,
      "threats": []
    }
  ],
  "registration": {
    "registrar": "Tucows Domains Inc.",
    "registrarIanaId": "69",
    "createdAt": "2026-06-22T04:34:11.000Z",
    "updatedAt": "2026-06-22T07:38:54.000Z",
    "expiresAt": "2027-06-22T04:34:11.000Z",
    "ageDays": 45,
    "ageText": "1m",
    "privacyProtected": false,
    "nameservers": [
      "gracie.ns.cloudflare.com",
      "howard.ns.cloudflare.com"
    ]
  },
  "certificate": {
    "issuer": "Google Trust Services",
    "validFrom": "2026-06-22T06:41:50.000Z",
    "validUntil": "2026-09-20T07:39:29.000Z",
    "valid": true,
    "protocol": "TLSv1.3"
  },
  "hosting": {
    "ip": "104.21.90.192",
    "countryCode": "US",
    "countryName": "United States",
    "city": "San Francisco",
    "provider": "Cloudflare, Inc.",
    "asn": 13335,
    "serverSoftware": "cloudflare",
    "mapImageUrl": null,
    "latitude": 37.7621,
    "longitude": -122.3971,
    "behindCloudflare": true
  },
  "timing": {
    "dnsMs": 0,
    "connectMs": 67,
    "tlsMs": 35,
    "ttfbMs": 36,
    "downloadMs": 2,
    "domReadyMs": 180,
    "loadCompleteMs": 248
  },
  "resources": [
    {
      "kind": "images",
      "count": 2,
      "bytes": 3928
    },
    {
      "kind": "documents",
      "count": 1,
      "bytes": 0
    },
    {
      "kind": "stylesheets",
      "count": 1,
      "bytes": 0
    }
  ],
  "networkStats": {
    "totalRequests": 4,
    "totalBytes": 3928,
    "failedRequests": 1,
    "uniqueDomains": 1,
    "thirdPartyRatio": 0,
    "httpsPercentage": 100
  },
  "cookies": [],
  "identity": {
    "finalUrl": "https://xto2au.com/",
    "brandName": null,
    "faviconUrl": "/api/scan/favicon/625f2c1b8e554f7d89632657ddd1d15d"
  },
  "telemetry": {
    "statusCode": 403,
    "durationMs": 1451,
    "scraper": "patchright",
    "attempts": 1,
    "source": "single",
    "contentType": "text/html; charset=UTF-8"
  },
  "securityHeaders": [
    {
      "key": "content_security_policy",
      "present": false,
      "value": null
    },
    {
      "key": "strict_transport_security",
      "present": false,
      "value": null
    },
    {
      "key": "x_frame_options",
      "present": true,
      "value": "SAMEORIGIN"
    },
    {
      "key": "x_content_type_options",
      "present": false,
      "value": null
    },
    {
      "key": "referrer_policy",
      "present": true,
      "value": "same-origin"
    },
    {
      "key": "permissions_policy",
      "present": false,
      "value": null
    },
    {
      "key": "x_xss_protection",
      "present": false,
      "value": null
    },
    {
      "key": "cross_origin_opener_policy",
      "present": false,
      "value": null
    }
  ],
  "redirects": [],
  "transactions": [
    {
      "url": "https://xto2au.com/",
      "method": "GET",
      "resourceType": "document",
      "statusCode": 403,
      "bytes": 0,
      "thirdParty": false
    },
    {
      "url": "https://xto2au.com/cdn-cgi/styles/cf.errors.css",
      "method": "GET",
      "resourceType": "stylesheet",
      "statusCode": 200,
      "bytes": 0,
      "thirdParty": false
    },
    {
      "url": "https://xto2au.com/cdn-cgi/images/browser-bar.png?1376755637",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 715,
      "thirdParty": false
    },
    {
      "url": "https://xto2au.com/cdn-cgi/images/cf-no-screenshot-error.png",
      "method": "GET",
      "resourceType": "image",
      "statusCode": 200,
      "bytes": 3213,
      "thirdParty": false
    }
  ],
  "hasCapture": false,
  "archive": {
    "technologies": {
      "source": "frozen",
      "scanId": "977f6d86546f41afaaa8462f81d6d436",
      "observedAt": "2026-08-05T03:30:09.316Z"
    },
    "headers": {
      "source": "frozen",
      "scanId": "977f6d86546f41afaaa8462f81d6d436",
      "observedAt": "2026-08-05T03:30:09.316Z"
    },
    "timing": {
      "source": "frozen",
      "scanId": "977f6d86546f41afaaa8462f81d6d436",
      "observedAt": "2026-08-05T03:30:09.316Z"
    },
    "http_transactions": {
      "source": "frozen",
      "scanId": "977f6d86546f41afaaa8462f81d6d436",
      "observedAt": "2026-08-05T03:30:09.316Z"
    },
    "screenshot_path": {
      "source": "frozen",
      "scanId": "977f6d86546f41afaaa8462f81d6d436",
      "observedAt": "2026-08-05T03:30:09.316Z"
    }
  },
  "networkSize": 1
}