nj[.]goumvcx[.]cc

The domain nj.goumvcx.cc was registered on 27 September 2025 through Dominet (HK) Limited, a registrar known to host a variety of abuse‑related sites. DNS resolution points exclusively to the IPv4 address 188.114.97.3, which is currently listed on at least one public security blocklist. The same IP address has been observed in prior phishing investigations, suggesting shared hosting of malicious payloads. Independent scanning on VirusTotal returned 15 positive detections out of 91 submitted security engines, indicating a moderate level of consensus among anti‑malware vendors that the domain distributes malicious content.

PhishDestroy, an operational phishing mitigation service, has also added the domain to its blocklist, confirming real‑world interception of traffic destined for the host. The domain is classified as a generic phishing site and is marked as active with an elevated risk rating. No public SSL certificate details, HTTP response codes, or page title information are currently available, limiting the depth of content‑level analysis.

Consequently, analysts should treat any traffic to nj.goumvcx.cc as hostile, block the domain at perimeter firewalls, DNS sinks, and proxy filters, and monitor for additional indicators that may emerge from the hosting IP. Ongoing observation of the 188.114.97.3 address for new domain registrations or related command‑and‑control activity is recommended. Because the domain is relatively new—less than one year old—it may still be employed in targeted credential‑harvesting campaigns, so rapid containment is advised.