gom-player[.]net

The domain gom-player.net is currently flagged as a generic phishing threat and is still active. This domain appears to be impersonating a well-known media player brand, potentially to deceive users into downloading malicious software or providing sensitive information. The threat is classified as 'under investigation', and users are advised to exercise caution when interacting with this domain.

Technical analysis of gom-player.net reveals several key details. The domain resolves to the IP address 104.21.74.137 and was registered through Spaceship, Inc. on January 10, 2026. Despite being flagged by Maltrail, the domain is not yet detected by any of the 95 vendors on VirusTotal, indicating a current lack of widespread recognition among security tools. However, the domain is listed on one security blocklist, suggesting some level of awareness within the cybersecurity community.

Given the active status of the domain and its potential phishing threat, users should avoid visiting gom-player.net. Organizations are advised to update their security tools and blocklists to prevent access to this domain. Continuous monitoring is recommended to detect any changes in its threat profile or detection status across security platforms. Users should remain vigilant and report any suspicious activities associated with this domain to relevant authorities.