Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@gcd.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
tmaxmarkets[.]com
tmaxmarkets.com 피싱 및 보안 점검
“TMGM - Best Forex Broker - Online CFD Trading Platform”
tmaxmarkets.com — 마지막으로 알려진 활성 (HTTP 200). 사기 유형: Fake Exchange. 증거 요약: VirusTotal 4/91 (CRDF, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); URLQuery 3 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 83/100. 등록기관: GoDaddy.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis of tmaxmarkets.com indicates that the domain is actively hosting a fraudulent financial service front‑end. The site presents the page title "TMGM - Best Forex Broker - Online CFD Trading Platform," suggesting an attempt to impersonate a legitimate trading venue. The domain was registered on November 10, 2025 through GoDaddy Corporate Domains, LLC and resolves to the IP address 8.223.65.253, which is hosted in Hong Kong under ASN 45102, identified as Alibaba (US) Technology Co., Ltd. The domain uses a Let’s Encrypt/E7 SSL certificate, which provides transport encryption but does not authenticate the underlying service. Security telemetry shows that two of ninety‑one VirusTotal scanners flagged the domain, and it appears on three public blocklists. Additional defensive feeds have listed the domain as blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the view that it is associated with phishing activity. The site returns HTTP 200 responses, indicating that the content is served without obvious error. Gridinsoft assigns a trust score of 0 out of 100, reflecting a lack of confidence in the site’s legitimacy. The domain is classified as a "Fake Exchange" in the provided intelligence, and an AlienVault OTX pulse references the domain in one threat‑intel record. While the exact content of the site has not been examined, the convergence of low trust scoring, multiple blocklist entries, and partial VirusTotal detections strongly suggests a high‑risk phishing operation targeting investors. Defenders should block DNS resolution for tmaxmarkets.com, monitor network traffic for connections to 8.223.65.253, and incorporate the domain into email and web filtering policies. Continued observation is advised to detect any changes in hosting or content that could affect the threat posture.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Nextron YARA rules | tmaxmarkets.com/assets/images/loading.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Hagezi Threat Feed | tmaxmarkets.com |
malicious | Sinkholed |
| Hagezi Threat Feed | www.tmproinv.com |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 분석
보관된 증거
증거 및 외부 보고서
PD-20260617-B1D258 Recipient: abuse@gcd.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.