MALICIOUS — CRITICAL
ggoldexchange[.]com
This domain is flagged as a fake cryptocurrency exchange platform designed to facilitate cryptocurrency theft.
- VirusTotal
- 12/91
- Blocklists
- 2 · MetaMask, SEAL
- التوفر
- المحتوى غير متوفر · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
ggoldexchange.com — المحتوى غير متوفر (HTTP 502). نوع الاحتيال: Fake Exchange. ملخص الأدلة: VirusTotal 12/91 (alphaMountain.ai, BitDefender, CRDF, CyRadar, ESET); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100. مسجّل النطاق: GMO Internet.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
This domain is flagged as a fake cryptocurrency exchange platform designed to facilitate cryptocurrency theft. Analysis indicates the infrastructure is specifically engineered to deceive users into depositing funds, which are subsequently drained from connected wallets. The elevated risk level is justified by the domain's technical indicators and confirmed malicious activity patterns. Infrastructure analysis reveals the domain ggoldexchange.com was registered on June 08, 2026, through GMO Internet, Inc., and currently resolves to the IP address 172.67.171.45. It appears on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL. The domain holds a Gridinsoft trust score of 0/100, and VirusTotal reports 9 out of 95 security vendors flagging it as malicious. The creation date discrepancy suggests potential domain spoofing or typosquatting tactics. Users are advised to avoid interacting with this domain entirely. If wallet connections were previously established, immediately revoke access via wallet settings and transfer remaining assets to a new, secure wallet. Enable transaction simulation tools to preview outgoing transfers before execution. Monitor account activity for unauthorized transactions and report any suspicious behavior to relevant security teams or blockchain analysis platforms for further investigation.
نطاق تغطية البيانات12 recorded checks
استخبارات أمن الشبكات
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | ggoldexchange.com |
malicious | Sinkholed |
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
تحليل VirusTotal
الأدلة والتقارير الخارجيةIndependent lookups and source reports
PD-20260611-FA0DE2 Recipient: abuse@internet.gmo Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.