gouvn[.]me

Analysis of the domain gouvn.me indicates an active high‑risk phishing infrastructure. The domain was registered on 5 February 2026 through GMO Internet, Inc. and is authoritative on the nameservers ns1.value-domain.com and ns2.value-domain.com. DNS resolution points to the IPv4 address 160.16.200.77, which is currently flagged by Google Safe Browsing as containing malware. The SSL certificate presented for the host is identified as a sinkhole certificate, suggesting that the domain may be monitored or intercepted by a defensive sinkhole. Community intelligence shows the domain appearing in fourteen AlienVault OTX pulses, and VirusTotal records indicate that 20 of 91 scanned security vendors have flagged the domain as malicious. The combined evidence classifies gouvn.me as a generic phishing site that is still active. Uncertainty remains regarding the exact payload or phishing campaign details, as no page content or target brand has been disclosed. Defenders should block DNS resolution to 160.16.200.77, add the domain to URL filtering lists, and monitor for any related indicators of compromise that reference the same nameservers or registration details.