gqdmvs[.]cc

Analysis of gqdmvs.cc indicates this domain is an active phishing site, confirmed by multiple technical indicators as of July 29, 2026. The domain was registered on June 12, 2026, through NameSilo, LLC, a registrar frequently used for low-cost, short-lived malicious domains. Infrastructure analysis reveals the domain currently resolves to IP address 188.114.97.3, which has been associated with other recently flagged phishing campaigns. While the exact brand or service being impersonated is not yet confirmed due to lack of page content analysis, the domain is classified as a generic credential-harvesting phishing site based on its detection profile. Detection data shows the domain is flagged by 11 of 91 security vendors on VirusTotal, a notable detection rate for a domain less than two months old.

It also appears on at least one security blocklist and is actively blocked by PhishDestroy, a specialized anti-phishing service. The combination of recent registration, low-cost registrar, and elevated detection rate supports an elevated risk assessment. No Safe Browsing or Open Threat Exchange (OTX) data was provided, leaving some aspects of its distribution and targeting unclear. Defenders are advised to treat gqdmvs.cc as malicious and implement blocking at the DNS or network level.

Organizations using PhishDestroy or similar services may already have protection in place. Given the domain's age and detection history, it is likely part of a broader, short-lived phishing operation. Further analysis of the resolved IP address and associated domains may reveal additional related infrastructure. No SSL certificate or HTTP response details were provided, so transport-layer security and page behavior remain unconfirmed.