pc[.]gomarketssvip[.]cc

The domain pc.gomarketssvip.cc, created on October 2, 2025, is currently classified as a high-risk entity associated with phishing activities. The site's page title, "GO MARKETS," suggests an attempt to impersonate a legitimate financial service. Analysis of this domain reveals that it is actively flagged by 13 out of 95 security vendors on VirusTotal, indicating a significant recognition of its malicious nature by the cybersecurity community. Furthermore, the domain has a trust score of 0/100 according to Gridinsoft, reinforcing concerns about its legitimacy.

The domain resolves to the IP address 172.67.166.123, which is associated with Cloudflare services, commonly used to obfuscate the actual hosting infrastructure of potentially harmful sites. The domain appears on three security blocklists, including SEAL, MetaMask, and PhishDestroy, which are utilized to protect users from known threats. These blocklists indicate that the domain has been identified as a tool for phishing or other malicious activities, corroborating its high-risk classification.

The SSL certificate issued by Google Trust Services does not imply safety, as many phishing sites employ SSL to appear more trustworthy. The technological stack reveals the use of Ant Design, Vue.js, and Cloudflare Browser Insights, which are not inherently malicious but are commonly used in modern web applications, including those that may have nefarious purposes. Given the available evidence, it is clear that pc.gomarketssvip.cc poses a significant threat to users.

Defenders should implement strict blocking measures against this domain and educate users to be wary of unsolicited communications that may lead them to this site. Monitoring for any emerging variations of this domain may also be necessary, as threat actors often create multiple similar domains to evade detection.