infomax.mk

https://infomax.mk

104.21.12.35 · Cloudflare, Inc.

Location

Toronto, Canada

Domain Age

—

HTTP

200 · 95.0s

SSL

Valid· WE1, Google Trust Services, US

Status

COMPLETED

Visual Evidence

Zoom

Title: "INFOMAX.MK"

Save

KB/IOK Matches (0)—

No KB/IOK detections were recorded for this scan.

INFOMAX.MK

Unknown

news_media | technology | ecommerce | other · 7/19/2026

Summary

The page presents INFOMAX.MK branding and uses the domain infomax.mk, which appears to be the official site for the brand. However, the page shows signs of credential capture risk via SPA behavior (0 static forms in HTML but heavy external script usage and dynamic rendering), multiple external trackers, and embedded iframes. While impersonation signals are weak or absent, the combination of hidden inputs, heavy third-party scripts, and iframe usage plus the WAF/Cloudflare hosting indicates potential for credential harvesting through a dynamic interface, warranting closer scrutiny for abuse rather than immediate labeling as phishing solely based on visuals.

Evidence Summary

▸Observed 3 capture stage(s); canonical stage is late_render_3s.

▸POST targets observed during capture: https://infomax.mk/cdn-cgi/rum?, https://analytics.google.com/g/collect?v=2&tid=G-0X29HC7WEZ&gtm=45je66h0h1v878596919za20g&_p=1782291389046&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&_eu=AAAIAGA&are=1&cid=1472644277.1782291391&frm=0&pscdl=noapi&rcb=2&sr=1280x720&uaa=x86&uab=64&uafvl=Not%253AA-Brand%3B99.0.0.0%7CHeadlessChrome%3B145.0.7632.6%7CChromium%3B145.0.7632.6&uam=&uamb=0&uap=Windows&uapv=10.0&uaw=0&ul=en-us&gaf=2&_s=1&tag_exp=115616986~115938466~115938469~119027224~119392696~119392704~119576876~119576880&sid=1782291391&sct=1&seg=0&dl=https%3A%2F%2Finfomax.mk%2F&dt=INFOMAX.MK&en=page_view&_fv=1&_ss=1&tfd=2951, https://stats.g.doubleclick.net/g/collect?v=2&tid=G-0X29HC7WEZ&cid=1472644277.1782291391&gtm=45je66h0h1v878596919za20g&rcb=2&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=115616986~115938466~115938469~119027224~119392696~119392704~119576876~119576880.

▸Distinctive asset clues: jquery-migrate.min.js, jquery.min.js, horizontalvertical.css, wc-blocks.css, Infomax.png, time.png.

Capture

Stages: 3

Canonical: Late Render (+3s)

Changed: No

Credential Signals

Forms: 0

Password fields: 0

Late-stage login UI: No

Resource Signals

Resources: 166

Hosts: 19

Domains: 13

Attack Techniques (0)

Indicators of Compromise (1)

▸No static login form in HTML; credentials likely captured via dynamically rendered UI

Risk AssessmentUsed in abuse reports

The site is the real INFOMAX.MK brand domain and presents typical news/portal branding. The scan notes 0 static forms and hidden inputs, plus a large load of external scripts and iframe embeds, which can be leveraged by SPA-driven credential capture or malvertising. Although there is no direct evidence of credential harvesting forms in the static HTML, the dynamic rendering possibility and reliance on third-party scripts warrant caution. The page should be monitored for potential credential collection behaviors or misconfigurations that could enable abuse. If abuse is suspected due to dynamic forms or hidden inputs, escalate for further investigation and monitoring.

Recommended Action

Monitor

Cross-Reference8

URL Intelligence