ggmtc.net - URL scan, 17 Aug 2026
MalwareAnalyzer by Cyble scanned ggmtc.net and returned a unknown verdict (score 16), categorised as credential-harvest. The page resolved to 217.160.0.86 on IONOS SE in DE. The domain was registered 5169 days ago through IONOS SE. 6 domains and 1 IP were contacted, over 2 HTTP requests. 8 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 17 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 16) · Confidence 22%
- Scanned URL:
http://ggmtc.net/userfiles/files/www-roblox-com-robux_GM431946152.pdf - Domain: ggmtc.net · IP: 217.160.0.86 · AS8560 · DE
- Server: Apache
- Page title: المركز الألماني الخليجي للتدريب الإداري | GGMTC
- HTTP status: 200 · text/html; charset=UTF-8
- Registrar: IONOS SE · domain age 5169 days · created 2012-06-21
- HTTP requests captured: 2
- Scan tier: fast · observed 2026-08-17 11:27:46 UTC
Malware communicating with this URL (8)
These samples were observed contacting or being served from ggmtc.net. Each links to its full analysis.
- free-robux-without-doing-anything_GM431946152.pdf - referenced ·
26b347f9aeaa6ff010ac4322fc6298f5· first seen 2026-08-17 - coin-master-free-spins-coins_GM406889139.pdf - referenced ·
23251a193c7f06040a5960480e1b9e1d· first seen 2026-08-17 - coin-master-100-spin-hack_GM406889139.pdf - referenced ·
752b6163e65f8b3c25ca17f4d821b3f8· first seen 2026-08-17 - Phishing - referenced ·
c16a21447f00c22994036f0cd5676f4a· first seen 2026-08-17 - Phishing - referenced ·
cbca6b1e16853a105891aa83c7c756ea· first seen 2026-08-16 - Phishing - referenced ·
7933a73f377356d24f17631b71ca85f5· first seen 2026-08-15 - Phishing - referenced ·
e18cceeab91cbf2b3713a24dd0047d97· first seen 2026-08-15 - Phishing - referenced ·
c94b787e30239da5b68bb8934f52bac7· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
- Served over plaintext HTTP
Detected technologies
- Apache
Contacted infrastructure
- 217.160.0.86 - AS8560 IONOS SE (Germany)
Observed indicators
- ggmtc.net
- cdnjs.cloudflare.com
- fonts.googleapis.com
- wa.me
- cdn.jsdelivr.net
- smtpjs.com
- 217.160.0.86
- http://ggmtc.net/userfiles/files/www-roblox-com-robux_GM431946152.pdf
- https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
- https://fonts.googleapis.com/css2?family=Tajawal:wght@400;500;700&display=swap
- http://ggmtc.net/userfiles/files/admintr.php
- http://ggmtc.net/userfiles/files/download_excel.php
- http://ggmtc.net/userfiles/files/about_us.php
- http://ggmtc.net/userfiles/files/blog.php
- http://ggmtc.net/userfiles/files/contact_us.php
- http://ggmtc.net/userfiles/files/english.php
- http://ggmtc.net/userfiles/files/law.php
- http://ggmtc.net/userfiles/files/finance.php
- http://ggmtc.net/userfiles/files/cyber-security.php
- http://ggmtc.net/userfiles/files/pmp.php
Other scans of ggmtc.net (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/minecraft-hack-2021_GM479516143.pdf - 23 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/free-online-generator-for-coin-master_GM406889139.pdf - 23 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/how-to-get-free-coins-on-tiktok_GM835599320.pdf - 23 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/redeem-robux-free_GM431946152.pdf - 17 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/roblox-speed-hack_GM431946152.pdf - 17 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/free-robux-only-username-no-human-verification_GM431946152.pdf - 17 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/coin-master-free-spins-2021_GM406889139.pdf - 17 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/free-robux-generator-com-roblox-hack_GM431946152.pdf - 17 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/hack-coin-master-nyc_GM406889139.pdf - 17 Aug 2026 - unknown ·
http://ggmtc.net/userfiles/files/install-free-game-coin-master_GM406889139.pdf
Questions about ggmtc.net
- Is ggmtc.net safe?
- The scan of ggmtc.net on 17 Aug 2026 reached no verdict either way (score 16). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with ggmtc.net?
- 8 analysed samples communicate with this URL, including Phishing.
- How was ggmtc.net checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of ggmtc.net
Scanned on MalwareAnalyzer by Cyble · Open interactive scan