# instant90cormax.com — MALICIOUS

> instant90cormax.com exposed as a fake weight loss drug scam. PhishDestroy identifies 18/95 vendors flagging it. Check the full report.

## Summary
PhishDestroy identifies instant90cormax.com as a high-risk fake weight loss drug scam website actively distributing counterfeit pharmaceuticals under the guise of promoting 'instant 90Cormax.' This domain poses severe risks to users, including exposure to harmful substances, financial fraud, and identity theft. The site mimics legitimate weight loss product pages to trick victims into purchasing counterfeit or unapproved drugs, which may contain undisclosed or dangerous ingredients. Given the active nature of the campaign and the growing trend of counterfeit pharmaceutical scams, immediate action is required to prevent potential harm to consumers seeking legitimate weight loss solutions.  This domain was flagged by 18 out of 95 security vendors on VirusTotal, with additional detections from PhishingArmy, OISD, and CERT-PL, totaling 3 blocklists. The domain was registered through MainReg Inc. on May 15, 2025, and is currently resolving to IP address 185.62.58.189 using a Let's Encrypt SSL certificate. The combination of a recently registered domain, high-risk phishing indicators, and multiple security blocklist entries underscores the credibility of this threat assessment. The low vendor detection rate (18/95) suggests that many security tools have not yet updated their definitions to include this scam, increasing the risk of exposure for unsuspecting users.  If you or someone you know has visited instant90cormax.com, cease all interactions with the site immediately and avoid entering any personal or payment information. Do not download files or click on any links from this domain. If you purchased any products from this site, contact your bank or payment provider to dispute the charges and request a chargeback. Monitor your financial accounts and credit reports for suspicious activity. Report the domain to your local cybercrime unit or organizations like PhishDestroy to help prevent further victimization. Users should also run a full system scan using reputable antivirus software to check for potential malware infections. Stay vigilant and prioritize verified, legitimate sources for healthcare products to avoid falling victim to similar scams.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-05-15 15:48:02
- Registrar: MainReg Inc.
- IP: 185.62.58.189

## Detection Status
- VirusTotal: 18 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishingArmy", "OISD", "CERT-PL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/12175535-aa76-46c3-9b1a-fb35897b1cce
- PhishDestroy: https://phishdestroy.io/domain/instant90cormax.com/
- LLM endpoint: https://phishdestroy.io/domain/instant90cormax.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/instant90cormax.com/
Last updated: 2026-03-22