# goodmarket.live — SUSPICIOUS

> PhishDestroy identifies goodmarket.live as an active crypto drainer scam with 0/95 VirusTotal detections. Avoid any transactions to protect your funds.

## Summary
PhishDestroy identifies goodmarket.live as a recently registered fraudulent e-commerce domain designed to deceive visitors into making crypto payments for non-existent goods. This site mimics a legitimate online marketplace, luring victims with discounted offers to steal cryptocurrency through malicious payment gateways. The domain was registered on July 20, 2025, and remains undetected by 95 security engines, making it a high-risk trap for unsuspecting shoppers.  This domain was flagged due to its suspicious characteristics: 0 detections on VirusTotal, creation on July 20, 2025, hosting on IP 34.111.179.208, and registration via NameCheap, Inc. under a Let’s Encrypt SSL certificate. The combination of recent registration, low detection rates, and cryptocurrency targeting suggests an active crypto drainer operation. Attackers often exploit newly registered domains to avoid detection, leveraging legitimate-looking SSL certificates to appear trustworthy.  If you visited goodmarket.live, do not enter any personal or payment information. Check your crypto wallets for unauthorized transactions and revoke any connected permissions immediately. Run a full antivirus scan and clear your browser cache. Report the domain to your bank or crypto exchange if you interacted with it, and warn others to avoid this fake e-commerce site.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-20 11:20:15
- Registrar: NameCheap, Inc.
- IP: 34.111.179.208

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/89a78940-c9d8-4de5-b90d-298d2c5451b6
- PhishDestroy: https://phishdestroy.io/domain/goodmarket.live/
- LLM endpoint: https://phishdestroy.io/domain/goodmarket.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/goodmarket.live/
Last updated: 2026-03-26