Skip to content

OXO Markets (oxomarkets.com) Security Report & Trust Score

Online Last scanned: April 30, 2026
48 /100 Moderate

Category Finance Trading

OXO Markets is a retail forex and CFD broker offering leveraged trading across multiple asset classes including forex, metals, indices, stocks, futures, and cryptocurrencies through various account types and trading platforms.

About oxomarkets.com

OXO Markets is a website categorized as Finance Trading. OXO Markets is a retail forex and CFD broker offering leveraged trading across multiple asset classes including forex, metals, indices, stocks, futures, and cryptocurrencies through various account types and trading platforms. It was last analyzed on April 30, 2026 and currently scores 48/100, which we rate as Moderate.

The domain was registered 1y 11m ago. It is registered through GoDaddy.com, LLC. The registration is set to expire on May 28, 2026. WHOIS privacy protection is not enabled. The domain is not signed with DNSSEC.

The site is hosted by AS16509 Amazon.com, Inc. in Walnut, United States. The server runs Vercel. It resolves to the IP address 216.198.79.193.

1 of 98 antivirus engines flag this domain.

With a trust score of 48/100, OXO Markets sits in the middle of our scale. Some signals raise questions without pointing to a clear problem. We recommend independently verifying the operator behind this website before engaging with it.

Think you've been scammed? Get a free consultation with cyber-intelligence experts

Your information is secure and confidential.

Is OXO Markets safe to use?

Based on our last scan on April 30, 2026, OXO Markets (oxomarkets.com) has a trust score of 48/100, which we rate as Moderate. Some signals raise questions, so independently verify the operator before engaging with it.

We found no official regulator warning on record for OXO Markets at the time of the last scan. Keep in mind that the absence of a warning is not proof of legitimacy: fraudulent platforms often operate for months before authorities list them. A legitimate investment service is normally registered with a recognized financial authority, such as the SEC, CFTC, FCA, ASIC or the regulator in your country, and that registration can be verified directly on the authority's own website. If a platform claims a license you cannot confirm at the source, treat that claim as false.

1 antivirus engine already flags this domain. Detections tend to accumulate over time, so an early flag on a young website is a meaningful warning rather than background noise.

The typical playbook of these scams

Think of the scam website as the last stage, not the first. What sets it in motion is human contact: an unsolicited message, a new "friend" from a dating app or messaging group, or a warm introduction on social media. That contact is cultivated patiently, often for weeks or months, until an "exclusive" investment tip feels like a natural next step. The industry name for this drawn-out grooming is pig butchering, a grim reference to fattening the target with trust before the payoff is taken.

With trust established, the target is funneled onto a polished platform whose numbers are pure fiction: the balances, the charts and the returns are all manufactured and steered entirely by the operators. A modest early withdrawal is occasionally allowed, a deliberate move to lower the victim's guard and invite a much bigger deposit. Try to cash out a meaningful amount, though, and everything changes: fresh "taxes", "release fees" or "verification charges" are demanded, the funds are held hostage until those are settled, and whatever you send after that vanishes.

Running in parallel is the clone firm, where scammers dress themselves up as a genuinely licensed business, reusing its name, logo and registration number, while quietly operating from a near-identical domain. It is the reason a stated license is only meaningful once you confirm it on the regulator's own website, and the reason the precise domain name carries just as much weight as the familiar brand shown beside it.

Signals that should make you pause

  • A guide you never asked for: a "coach", acquaintance or new online contact keeps steering you to one named site.
  • Risk-free pitch: profits are framed as safe and dependable, locked-in, sky-high, and supposedly free of any real downside.
  • Constant countdown: a relentless rush to commit, with disappearing bonuses or a deadline that always seems to be today.
  • Private-account transfers: they ask to be paid in cryptocurrency or gift cards, or by sending money straight to a private individual's account.
  • Missing from the register: their claimed authorization does not show up on the regulator's own register, assuming any license is mentioned at all.
  • Funds held back: getting your money out proves difficult, with fresh "taxes", "release fees" or repeated checks standing between you and your funds.
  • Straight-line gains: on screen the profits rise in a straight line, entirely detached from how the real market is moving.

Already lost money? Here is what to do next

  1. Break off every line of communication: step away from the platform and from whoever steered you toward it. Staying in touch only hands them fresh chances to take more, often through a fake "account manager" who pretends to be there to help.
  2. Pay nothing to unlock funds: do not send a single "release fee", "tax" or "unlock charge" to set a withdrawal free. Genuine providers subtract their fees from what you already hold; only fraudsters insist on extra money before you see a cent.
  3. Contact your bank without delay: reach out to your bank or card issuer as soon as you can. Because chargebacks and wire recalls have tight deadlines, acting fast is what gives you a realistic chance of getting money back.
  4. Save the proof: capture screenshots of the platform and your conversations, and hold on to emails, transaction references and any wallet addresses you paid into.
  5. Notify the regulators: alert the cybercrime or consumer-protection authority in your country, along with your national financial regulator.
  6. Distrust recovery pitches: treat any "fund recovery" firm that later promises to retrieve your losses for an advance fee with deep suspicion. Lists of victims are traded around, and this pitch is commonly the same scam coming back for more.

Threats

1 / 98 engines flagged

Security vendors

1
BBfore.Ai PreCrimemalicious

Blacklists

1 provider, all clear
  • google_safe_browsing community

Identity

WHOIS

RegistrarGoDaddy.com, LLC (IANA #146)
CreatedMay 28, 2024
UpdatedFebruary 20, 2026
ExpiresMay 28, 2026
Domain age1y 11m
DNSSECNot signed
Privacy protectionNo
Nameservers
  • ns01.domaincontrol.com
  • ns02.domaincontrol.com
Status
4 entries
  • client delete prohibited
  • client renew prohibited
  • client transfer prohibited
  • client update prohibited

SSL

CertificateValid
IssuerLet's Encrypt
Subjectwww.oxomarkets.com
Valid fromApril 24, 2026
Valid untilJuly 23, 2026
Expires inExpired 40 days ago
ProtocolTLSv1.3
CipherTLS_AES_128_GCM_SHA256
SAN
  • www.oxomarkets.com

Server

IP address216.198.79.193
IPv6
ASNAS16509
ProviderAS16509 Amazon.com, Inc.
CountryUnited States (US)
CityWalnut
Server softwareVercel

Extracted contacts

Contact details found on the site and in regulator warnings, shown for identification only. Do not contact them.

Emails

1
  • info@oxomarkets.com

Phones

1
  • (778) 486-1849

Social profiles

1
  • instagram: @oxomarkets

Screenshot

Screenshot of oxomarkets.com captured at the last scan
Captured at last scan

Forensics

Page timing

DNS lookup 57 ms
TCP connection 95 ms
TLS handshake 93 ms
Time to first byte 9 ms
Content download 277 ms
DOM content loaded 665 ms
Load complete 950 ms

Redirect chain

1
  1. https://www.oxomarkets.com/

Network & resources

Total requests 42
Unique domains 2
Total size 408.7 KB
HTTPS 100.0%

Technologies

3
  • Next.js meta-framework
  • Vercel hosting
  • Tailwind CSS css-framework

Uptime

Last 30 days

100.0% uptime · 2,541 ms avg response