gobf.mx
Category: Suspicious
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of gobf.mx
gobf.mx appears to present itself as a Mexican government-related website, specifically a page for consulting CURP records through RENAPO. The screenshot uses official-looking Mexican government branding, including the "Gobierno de México" header and a form labeled "Consulta tu CURP," which is associated with identity and population registry services.
Based on the domain name and page content, the site may be attempting to offer access to public-administration or citizen-identification services. However, the domain itself does not match the better-known official Mexican government naming pattern commonly associated with public institutions, so the branding and purpose shown on the page warrant closer scrutiny.
The site is categorized by multiple web-classification providers as government-related, although one classification source also marked it as suspicious. That combination suggests the page is themed around government services, but its legitimacy should not be assumed solely from appearance.
Safety Assessment for gobf.mx
This domain shows several cautionary indicators at the time of this scan. It was flagged by 7 out of 91 security engines, while malware scanning of the fetched page did not identify malicious files and major threat databases were otherwise clean. The mixed result means there is no single conclusive signal, but the multi-engine detections are notable and should be taken seriously.
The screenshot shows a page styled to resemble an official Mexican government service for CURP lookup, yet the domain is only 10 days old and is not ranked for broader traffic. For a site requesting identity-related information, that very recent registration materially increases risk. The domain name also appears unusual for an official government service, which may indicate the site is imitating a public-sector portal or otherwise trying to benefit from official-looking branding.
Although no threats were detected by the page-level malware scan and blacklist databases were clean at the time of this scan, the combination of a very new domain, official-looking identity-service content, and multiple security-engine detections suggests elevated risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate with an expiry date in September 2026, which indicates HTTPS was configured at the time of testing. DNSSEC status is unknown. The domain uses Cloudflare nameservers, while the resolved server IP was 38.180.241.64 and hosting was attributed to 3NT SOLUTIONS LLP in Los Angeles, United States.
From a security-review perspective, the main concerns are not the certificate itself but the surrounding context: the domain is extremely new, the server stack is not clearly identified, and the site appears to collect sensitive personal information under government-style branding. A valid certificate only confirms encrypted transport and does not by itself verify that the operator is an official institution.
Share your experience with this website. Was it safe? Did you encounter any issues?