Skip to content

XFine (x-fine.com) Security Report & Trust Score

Online Last scanned: July 29, 2026
6 /100 High Risk

Category Finance Trading

XFINE is a forex and CFD broker offering trading on multiple asset classes including forex, cryptocurrencies, commodities, indices, and equities through leveraged trading platforms with various account types.

About XFine

XFine is a website categorized as Finance Trading. XFINE is a forex and CFD broker offering trading on multiple asset classes including forex, cryptocurrencies, commodities, indices, and equities through leveraged trading platforms with various account types. It was last analyzed on July 29, 2026 and currently scores 6/100, which we rate as High Risk.

The domain was registered 1y 8m ago. It is registered through GoDaddy.com, LLC. The registration is set to expire on November 26, 2026. WHOIS privacy protection is not enabled. The domain is not signed with DNSSEC.

The site is hosted by AS13335 Cloudflare, Inc. in San Francisco, United States. The server runs cloudflare. It resolves to the IP address 104.21.6.190.

1 of 92 antivirus engines flag this domain. 1 regulator warning has been issued against this domain, including an alert from CBR.

With a trust score of 6/100, XFine sits in the highest-risk band of our scale. Multiple independent signals align with patterns commonly seen on fraudulent platforms. Exercise extreme caution before interacting with this website in any way.

Think you've been scammed? Get a free consultation with cyber-intelligence experts

Your information is secure and confidential.

Is XFine safe to use?

Based on our last scan on July 29, 2026, XFine (x-fine.com) has a trust score of 6/100, which we rate as High Risk. Multiple independent signals match patterns commonly seen on fraudulent platforms, so we advise extreme caution before interacting with it in any way.

1 official regulator warning has been published about x-fine.com, issued by CBR. A warning like this means a financial authority has publicly flagged the website: it is one of the strongest risk signals that exists, and it is rarely issued without substantial grounds.

1 antivirus engine already flags this domain. Detections tend to accumulate over time, so an early flag on a young website is a meaningful warning rather than background noise.

How online scams like this operate

Most modern investment fraud does not start on the fraudulent website itself: it starts with a person. Operators build a fake relationship through social media, dating apps, messaging groups or an unsolicited message, sometimes over weeks or months, before casually introducing an "exclusive" investment opportunity. This long-grooming approach is widely known as pig butchering: the victim is patiently "fattened" with trust before the financial harvest begins.

The victim is then directed to a professional-looking platform. The dashboard, balances and trading charts shown there are fabricated and fully controlled by the operators. Small early withdrawals are sometimes honored on purpose to build confidence and encourage a much larger deposit. When the victim finally asks to withdraw a significant amount, the tone changes: sudden "taxes", "release fees" or "verification charges" appear, and the account is frozen until they are paid. Every additional payment simply disappears.

A related tactic is the clone firm: scammers impersonate a genuinely licensed company, copying its name, logo and registration number while operating from a slightly different domain. This is why a license claim should always be verified on the regulator's own website, and why the exact domain name matters as much as the brand it displays.

Warning signs to watch for

  • Unsolicited contact: a stranger, "advisor" or online acquaintance steering you toward a specific platform.
  • Guaranteed returns: promises of fixed or unusually high profits with little or no risk.
  • Pressure to act quickly: expiring bonuses, "last remaining spots", or warnings that the opportunity closes today.
  • Unusual payment methods: requests to pay in cryptocurrency, gift cards, or by transfer to a personal account.
  • Unverifiable license: a regulatory license that cannot be confirmed on the regulator's own register, or no license at all.
  • Withdrawal problems: surprise "taxes", "release fees" or endless verification steps before you can access your own money.
  • Only-up profits: a dashboard whose balance rises regardless of market conditions.

What to do if you already sent money

  1. Stop all communication: cut off the platform and whoever introduced you to it. Every additional contact is an opportunity for them to extract more money, including through fake "account managers" offering to fix the problem.
  2. Never pay a release fee: do not hand over a "tax" or "unlock charge" to recover a withdrawal. Legitimate services deduct fees from the balance; only scams demand extra money upfront.
  3. Alert your bank immediately: contact your bank or card issuer at once. Chargebacks and wire recalls are time-sensitive, so the sooner you report, the better your chances.
  4. Preserve the evidence: save screenshots of the platform and conversations, emails, transaction references and any wallet addresses you paid to.
  5. Report the fraud: notify your national cybercrime or consumer-protection authority, and the financial regulator in your country.
  6. Beware recovery scams: be wary of "fund recovery" agents who contact you afterwards and guarantee to get your money back for an upfront fee. Victim lists are resold, and recovery fraud is often the second act of the same scam.

Threats

1 / 92 engines flagged

Antivirus engines

1
GGridinsoftsuspicious

Regulator warnings

1
Regulator Country Date Source
CBR RU November 22, 2024 CBR warning

Blacklists

1 provider, all clear
  • google_safe_browsing community

Identity

WHOIS

RegistrarGoDaddy.com, LLC (IANA #146)
CreatedNovember 26, 2024
UpdatedFebruary 13, 2026
ExpiresNovember 26, 2026
Domain age1y 8m
DNSSECNot signed
Privacy protectionNo
Nameservers
  • sloan.ns.cloudflare.com
  • weston.ns.cloudflare.com
Status
4 entries
  • client delete prohibited
  • client renew prohibited
  • client transfer prohibited
  • client update prohibited

SSL

CertificateValid
IssuerGoogle Trust Services
Subjectx-fine.com
Valid fromJune 22, 2026
Valid untilSeptember 20, 2026
Expires inIn 22 days
ProtocolTLSv1.3
CipherTLS_AES_256_GCM_SHA384
SAN
  • x-fine.com
  • *.x-fine.com

Server

IP address104.21.6.190
IPv6
ASNAS13335
ProviderAS13335 Cloudflare, Inc.
CountryUnited States (US)
CitySan Francisco
Server softwarecloudflare

Extracted contacts

Contact details found on the site and in regulator warnings, shown for identification only. Do not contact them.

Emails

3
  • info@xfine.co
  • partner@x-fine.com
  • support@x-fine.com

Phones

3
  • +1 758 285 7447
  • +44 07527089165
  • 2024-00596

Social profiles

5
  • twitter: @xfine_global
  • instagram: @xfinebroker
  • linkedin: @x-fine
Show 2 more
  • telegram: @xfineeng
  • youtube: @XFINEBROK

Screenshot

Screenshot of x-fine.com captured at the last scan
Captured at last scan

Forensics

Page timing

DNS lookup 0 ms
TCP connection 0 ms
TLS handshake 0 ms
Time to first byte 610 ms
Content download 3 ms
DOM content loaded 2,464 ms
Load complete 2,803 ms

Redirect chain

1
  1. https://x-fine.com/en/

Network & resources

Total requests 128
Unique domains 14
Total size 19.8 MB
HTTPS 100.0%

Cookies

28
28 cookies
NameDomainFlags
bh.yandex.ruSecure
_ga_7FC6BEQ2YB.x-fine.com
_ga.x-fine.com
pll_languagex-fine.comSecure
_tccl_visitor.x-fine.comSecure
_tccl_visit.x-fine.comSecure
_scc_session.x-fine.comSecure
_ym_uid.x-fine.comSecure
_ym_d.x-fine.comSecure
sync_cookie_csrf.mc.yandex.comSecure
_ym_isad.x-fine.comSecure
sync_cookie_csrf.mc.yandex.ruSecure
_yasc.yandex.ruSecure
_ga_D0JWVMRRNZ.x-fine.com
ymex.yandex.comSecure
receive-cookie-deprecation.yandex.comSecure HttpOnly
yabs-sidmc.yandex.comSecure
i.yandex.comSecure HttpOnly
yandexuid.yandex.comSecure
yuidss.yandex.comSecure
bh.yandex.comSecure
sync_cookie_csrf_secondary.mc.yandex.comSecure
sync_cookie_csrf_secondary.mc.yandex.ruSecure
sync_cookie_ok_secondary.mc.yandex.comSecure
yandexuid.yandex.ruSecure
yuidss.yandex.ruSecure
i.yandex.ruSecure
_ym_visorc.x-fine.comSecure

Technologies

6
  • WordPress cms
  • Cloudflare cdn
  • Google Analytics analytics
  • Google Tag Manager analytics
  • Tailwind CSS css-framework
  • PHP language

Uptime

Last 30 days

100.0% uptime · 1,968 ms avg response