hcgos[.]com

This domain, hcgos.com, is currently flagged as an active generic phishing infrastructure with an elevated risk rating. VirusTotal scans show that 17 of 91 security vendors have identified the domain as malicious, indicating a moderate consensus among detection engines. The domain appears on a single public security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing resource.

Registration data reveals that the domain was created on 19 March 2024 and is registered through Gname.com Pte. Ltd., a registrar that has been observed in other malicious registrations. No additional intelligence such as hosting IP, ASN, or SSL certificate details is publicly available at this time, leaving the broader infrastructure of the campaign largely opaque. The limited visibility of hosting attributes hampers attribution efforts, but the existing detection footprint suggests the operators are leveraging a short-lived domain to host credential‑harvesting pages.

Defenders should update their URL filtering and DNS blocklists to include hcgos.com, monitor for any outbound connections to the domain, and consider enforcing multi‑factor authentication to mitigate potential credential compromise. Continuous re‑evaluation is advised, as further analysis may uncover additional indicators such as associated IP ranges or malicious payloads.