nj[.]goumvcf[.]cc

The domain nj.goumvcf.cc was created on September 27, 2025 and is currently listed as active with an elevated risk rating. Infrastructure analysis shows the domain resolves to the IP address 188.114.97.3, which is the same host observed for other malicious resources reported by security researchers. Registration data indicates the domain was purchased through Dominet (HK) Limited, a registrar frequently associated with short‑lived malicious domains.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has identified it as a phishing source. VirusTotal scans have returned 14 positive detections out of 91 submitted security vendors, providing additional corroboration of malicious intent. No public information is available regarding SSL certificate details, HTTP response codes, page title, or any associated brand or kit, so the exact content served by the site remains unverified.

Defenders should add 188.114.97.3 to network‑level blocklists, enforce DNS filtering for nj.goumvcf.cc, and monitor outbound traffic for connections to this address. Given the confirmed blocklist entry and multi‑vendor detections, it is advisable to treat any email or web interaction referencing this domain as malicious and to educate users about the risk of credential harvesting attempts that may originate from it. Continuous re‑evaluation is recommended as additional telemetry becomes available.