goofy-accs[.]com

This domain, goofy-accs.com, is identified as a credential harvesting phishing site designed to deceive users into submitting sensitive login credentials. Analysis indicates the site employs social engineering tactics, likely impersonating legitimate services to trick visitors into entering usernames, passwords, or other authentication details. The infrastructure is configured to appear trustworthy, including the use of a Let's Encrypt SSL certificate, which may mislead users into believing the site is secure. Infrastructure analysis reveals the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains. The domain resolves to the IP address 190.115.22.211 and is currently flagged by 6 out of 95 security vendors on VirusTotal. Additionally, it appears on two security blocklists, PhishDestroy and OISD, and has been documented in one threat intelligence pulse on AlienVault OTX. These indicators confirm its classification as a high-confidence phishing threat. Users who may have visited goofy-accs.com or entered credentials on the site should take immediate action. First, revoke any sessions or tokens associated with the compromised account. Reset passwords for the affected account and any other services where the same credentials may have been reused. Enable multi-factor authentication where available to mitigate further risk. Monitor the account for unauthorized activity and report any suspicious transactions or logins to the relevant service provider. If financial or personally identifiable information was submitted, consider placing a fraud alert with credit bureaus and reviewing account statements for irregularities.