If you've landed on gpmc.gm.com and immediately got sent to a Microsoft login page, you are right to be suspicious. This domain hides everything about who owns it — even the WHOIS registry returns no match. For a site that exists solely to redirect you to an authentication page, that's not just unusual; it's the opposite of what a trustworthy service looks like. Most legitimate companies handling logins have clear ownership records, a history of being online, and at least a basic privacy policy. Gpmc.gm.com has none of those. The security basics are fine — it uses encryption and hasn't been blacklisted — but that's like a car having working headlights while the registration is fake. The bigger question is: why would a legitimate business hide its identity so completely? Without transparency around who runs this domain, there is no good reason to enter any credentials here. If you need to access a service, go directly to the provider's known website rather than typing your password into an anonymous redirect.
In plain English
I wouldn't trust this site with any personal information. The domain is completely anonymous — no ownership records, no web history, no contact details — and it immediately redirects to a Microsoft login page. That combination of anonymity and a login redirect is a major warning sign, and there's nothing here to suggest it's a legitimate service.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site uses a valid SSL certificate and enforces HTTPS encryption, which is the baseline for any trustworthy website. No malware or phishing threats have been reported, and the connection uses modern, secure encryption standards.
The WHOIS record returns no match for the domain, meaning whoever owns this site is effectively anonymous. For a site that redirects to a login page, that's a serious red flag — legitimate businesses handling authentication don't hide their ownership.
The domain has no history in the Wayback Machine, no Trustpilot presence, and is not in any popular website rankings. While being new isn't a crime, the complete absence of any track record makes it hard to know who you're dealing with.
The homepage immediately redirects to Microsoft's login service, so there's no actual content about the business. No branding, no favicon, no contact information — the site doesn't tell you who is behind it or what they do.
A site that sends you to a login page should have a privacy policy and terms of service, especially if it collects credentials. This site offers none. Combined with the hidden WHOIS, there's no accountability if something goes wrong.
The domain blocks all search engine crawlers, which keeps the site off search results entirely — that's unusual for a legitimate business. DNSSEC isn't enabled, but the DNS blacklists are clean and email isn't handled here, so the setup is basic but not broken.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.