m[.]gomarketssvip[.]cc

The domain m.gomarketssvip.cc is identified as a high-risk credential theft site and is currently active. This domain impersonates the brand 'GO MARKETS', potentially misleading users into disclosing sensitive information such as login credentials.

Analysis indicates that m.gomarketssvip.cc has been flagged by 16 of 95 security vendors on VirusTotal, suggesting a significant level of suspicion and potential malicious activity. The domain was registered through Gname.com Pte. Ltd. on October 02, 2025, and resolves to the IP address 172.67.166.123, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. These blocklists further corroborate the domain's malicious intent and the necessity for heightened vigilance.

Given the current status of the domain, it is recommended that all users avoid interacting with m.gomarketssvip.cc. Network administrators should implement DNS-based blocking or firewall rules to prevent access to this domain. Additionally, users should be educated about the risks of credential theft and encouraged to use multi-factor authentication (MFA) for all sensitive accounts. Continuous monitoring of this domain and related infrastructure is advised to detect any changes in threat behavior or additional malicious activities.