Security Scan Report: pcrtal.tmgmexchanges.one

Redirected to:
https://pcrtal.tmgmexchanges.one/#/onboarding
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 4 domains to perform 77 HTTP transactions. The main domain is tmgmexchanges.one and was registered 7 months ago.

Submitted URL: https://pcrtal.tmgmexchanges.one/

Effective URL:
https://pcrtal.tmgmexchanges.one/#/onboarding
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Unaffiliated lookalike domain using TMGM's brand for a forex/crypto onboarding portal, backed by separate tmgmexchanges.cc APIs; reported as phishing and unranked. No forms were captured, but do not enter any credentials or funds.

Risk Factors (5)
Use of a different organisation's brand (TMGM) on a domain that is not TMGM's official site
Primary domain named in a phishing threat-intelligence report
Suspicious lookalike infrastructure across .one and .cc domains with 'tmgmexchanges' naming
Trading/account onboarding funnel soliciting user engagement under a broker's branding
HIGH-severity IDS alerts for .cc TLD DNS queries matching the site's own API domains
Domain age information unavailable

Details

Page Title

TMGM

Scan Type

public

Domain Name Analysis

You're looking at domain 'pcrtal.tmgmexchanges.one' on the .one top-level domain, featuring subdomain 'pcrtal'. Its registrable label 'tmgmexchanges' stretches across 13 characters split between three vowels and 10 consonants. Breaking it apart gives 3 words: t, mgm, exchanges. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pcrtal.tmgmexchanges.one/

Page Load Overview

2.37s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇩🇰Danish
Code: da
Confidence:36%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:27 chars
Detector Agreement:100%
Language mismatch: Declared as en but detected as da

Website Classification

Primary Category

cryptocurrency blockchain80% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain
80%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27193.107.23.146Hong Kong
AS9294GNET INC.
25104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
773--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13AB22C56D6F128D3D20A8358F5D3BB1762A249458F8B8CB0BDADD0B84FCA9D4027FE54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:U27ZCxK2DbLNfS3YT0aZNJFJf46FVyGxpOfY9b6LrCr2jfV3yBc0i82dY7OI:UiQxK2ZFJf46FVDxAfY16vCr2jfV3e0K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23826:Qw5SKAkUUSBnK4KZAUBrDgACkhyEkKyjIhAFIFAEYggxkCQIZZjQSRAKIQPiGGAKIMjEJgmBWAV8tAASYMBAnm5AM42AxhYW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7e7e7e7e7
Perceptual Hash:b39366cc89999966
Difference Hash:104d4d140c0c4d4d
Wavelet Hash:2727032300242020
Color Hash:#612d86

Other Hashes

Crop Resistant:104d4d140c0c4d4d

Scan History

Scan history not available

Unable to load historical scan data