dmvca[.]gov-coew[.]cc

The domain dmvca.gov-coew.cc was registered on 12 June 2026 through Gname.com Pte. Ltd., a Singapore‑based registrar that appears in other malicious registrations, and has been observed in active phishing infrastructure as of the report date, 29 July 2026. Early detection by PhishDestroy placed the domain on a security blocklist; this is the sole open‑source blocklist entry identified. VirusTotal scans show that 13 of 91 anti‑malware engines flagged the domain, indicating a moderate level of consensus among scanners that the site is malicious. The domain’s risk level is classified as elevated and its operational status is listed as active.

No public WHOIS records reveal additional hosting details, and no SSL certificate information, HTTP response codes, or page‑title metadata have been published in the current intelligence set. Consequently, the precise content hosted on the site, the targeted brand, and the phishing kit employed remain unknown. The absence of these data points limits attribution but does not diminish the threat posed by the domain, given its inclusion on a reputable blocklist and the multiple vendor detections.

Defenders should add dmvca.gov-coew.cc to URL filtering and endpoint protection policies, enforce block‑list rules that include the domain, and monitor for any outbound connections to the associated IP space once it becomes resolvable. Network traffic logs should be inspected for DNS queries to the domain, and any login attempts that reference the domain should be treated as compromised. Threat‑intel platforms should be queried periodically for new detections, and any future VirusTotal re‑scans should be reviewed for changes in detection ratio. Continuous re‑evaluation is advised, as further analysis may reveal hosting infrastructure, SSL fingerprints, or page content that could refine mitigation actions.