Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is complaint@gname.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
nexte-amm[.]cc
“Nexte: One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrenc…”
nexte-amm.cc — Não verificado. Tipo de golpe: Investment Scam. Resumo das evidências: VirusTotal 13/91 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Forcepoint ThreatSeeker); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 89/100. Registrador: Gname.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain nexte-amm.cc was registered on May 06, 2026 through Gname.com Pte. Ltd. and continues to resolve to the IP address 104.21.13.61, which belongs to the Cloudflare network (AS13335). The site is served over HTTPS using a Let’s Encrypt certificate (E7) and returns HTTP 200 on request. Both authoritative and recursive DNS queries resolve to the Cloudflare nameservers ruben.ns.cloudflare.com and serenity.ns.cloudflare.com.
The landing page presents itself as “Nexte: One‑Stop Global Investment Platform” and lists services such as forex, commodities, stocks, indices, cryptocurrencies, gold and oil. This branding closely mirrors legitimate investment‑related services, indicating a deliberate brand‑impersonation attempt aimed at luring victims into an investment scam. The page title and the listed asset classes are consistent with the declared target brand of “Investment Scam”.
Open‑source threat feeds have recorded the domain in at least one AlienVault OTX pulse and it appears on three public blocklists. Independent analysis platforms have assigned a Gridinsoft trust score of 0 out of 100, and three of ninety‑five VirusTotal scanners have flagged the domain as malicious. The combination of a low trust score, blocklist listings, and partial VirusTotal detection underscores a high confidence that the domain is being used for fraudulent activity.
Defenders should add nexte-amm.cc to network‑level deny lists and configure web filters to block HTTP and HTTPS traffic to the associated IP address. Continuous monitoring of DNS queries for the domain and its Cloudflare nameservers is advised to detect any re‑use or pivot attempts. Incident response teams should treat any communications referencing the Nexte branding as suspect and advise users to avoid providing personal or financial information to the site.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Análise do VirusTotal
Evidências arquivadas
Análise da configuração do site
Evidências e relatórios externos
PD-20260623-C1FBFC Recipient: complaint@gname.com Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo