gofxmarket[.]com

gofxmarket.com is flagged as a phishing‑related site. The domain was registered on 24 April 2026 and currently resolves to the IPv4 address 75.2.60.5. The web server returns HTTP 200 and presents the title “GoFx Trading”, while the TLS certificate is issued by Let’s Encrypt (E8). These characteristics align with previously observed phishing infrastructures that use freshly registered domains and free SSL certificates to gain user trust. Network analysis shows the host is backed by an AWS Global Accelerator service, reported as located in the United States. The domain’s authoritative name servers are ares.trustname.com and zeus.trustname.com, and its mail exchangers are mx.zoho.com (priority 10) and mx2.zoho.com (priority 20). A Gridinsoft trust score of 0 out of 100, inclusion on one security blocklist, and a single AlienVault OTX pulse further corroborate malicious intent. The site has also been added to the PhishDestroy block list. The primary malicious behavior attributed to gofxmarket.com is generic phishing, as indicated by the threat type label and the presence of the “GoFx Trading” branding, which is commonly abused to lure victims into credential‑stealing flows. No malware detections were recorded on VirusTotal (0 out of 95 engines), and the domain does not yet appear in broader reputation services, leaving a gap in behavioral evidence such as payload samples or command‑and‑control activity. Defenders should treat the domain as hostile. Immediate actions include adding gofxmarket.com to web‑filter deny lists, enforcing DNS‑level block or sinkhole, and configuring email gateways to reject or quarantine messages that reference the MX hosts or the domain’s name servers. Continuous monitoring for any changes in the IP address, SSL certificate issuance, or new detections on threat‑intelligence platforms is advised to capture potential escalation.