msggo[.]cc

This domain, msggo.cc, is identified as a credential harvesting phishing site targeting users through deceptive login portals. Analysis indicates the domain is currently offline, though prior activity suggests it was actively used for phishing campaigns. No specific brand impersonation was confirmed, but the infrastructure aligns with generic phishing operations designed to capture sensitive credentials. Infrastructure analysis reveals the domain was flagged by 20 of 95 security vendors on VirusTotal, indicating moderate confidence in its malicious nature. It resolves to IP address 188.114.96.3, hosted under AS13335 (Cloudflare, Inc.), and was registered on November 11, 2025, through NiceNIC International Group Co., Limited. The domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1). Despite the current 404 page title, historical data confirms its use in phishing operations. Current status shows the domain as offline, though residual risk remains due to its prior malicious activity. Organizations are advised to block the domain and its associated IP (188.114.96.3) at the network perimeter. Security teams should monitor for related domains registered through the same registrar (NiceNIC International Group Co., Limited) and investigate any connections to Cloudflare-hosted IPs exhibiting similar patterns. Endpoint protection should be updated to include this domain in phishing detection rules, and users should be alerted to its prior use in credential theft attempts.