faxmarkets[.]com[.]highfaxmarket[.]com

PhishDestroy has flagged faxmarkets.com.highfaxmarket.com as an active phishing domain designed to mimic a legitimate fax service, likely aiming to harvest login credentials or payment details from unsuspecting users. This domain poses as a highfaxmarket.com service, leveraging a subdomain structure to appear credible. Technical indicators show it resolves to IP 198.251.83.106 and operates under a Let’s Encrypt SSL certificate for an added veneer of legitimacy. Notably, VirusTotal currently shows 0 detections out of 95 scanners, indicating it evades immediate detection. The domain was registered on November 21, 2025, through Global Domain Group LLC, a relatively recent creation that aligns with the tactics of opportunistic threat actors seeking to exploit trust in established services. If you’ve visited this domain, avoid entering any personal or financial information. Disconnect from the site immediately, clear your browser cache, and consider running a malware scan on your device. Report the domain to your IT security team or platform provider (e.g., Google Safe Browsing, PhishDestroy) to help block its distribution. Monitor accounts for unusual activity if credentials were entered. Stay vigilant—similar campaigns often evolve to evade detection rapidly.