gvvacademy[.]com

The domain gvvacademy.com was observed on 12 July 2026 as part of a high‑risk generic phishing campaign. The site returns HTTP 200 and presents the page title “Golden Value Venture”. VirusTotal has recorded a single malicious verdict out of 95 scanned security vendors, indicating that at least one vendor has identified suspicious activity associated with the domain. The authoritative name servers are dakota.ns.cloudflare.com and keira.ns.cloudflare.com, both operated by Cloudflare. DNS resolution points to IP address 172.67.204.243, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The TLS certificate is issued by Google Trust Services under the WE1 identifier, confirming the use of a valid HTTPS certificate. Domain registration took place on 31 May 2023 through GoDaddy.com, LLC, and no subsequent transfer or modification records are evident. Security telemetry shows the domain listed on one public blocklist and currently blocked by PhishDestroy. The MX record set includes entries such as “_dc-mx.48b61dcc5fc6.gvvacademy.com” with priority 0, suggesting the infrastructure may be prepared for email‑based phishing delivery. Apart from the single VirusTotal flag, no additional vendor detections have been reported, and the page content has not been publicly analysed, leaving the exact phishing payload and targeted brand unspecified. Defenders should add gvvacademy.com to network and email filtering rules, enforce TLS inspection to capture any credential submissions, and consider sinkholing the resolved IP address to disrupt traffic. Continuous monitoring of Cloudflare‑associated IP ranges for anomalous activity is advised, as is periodic re‑scanning of the domain through multiple analysis engines to capture any emerging detections.