goumad[.]cc

Analysis of the domain goumad.cc indicates it is actively flagged as a phishing threat specializing in credential theft. Registered on June 12, 2026, through NameSilo, LLC, the domain resolves to the IP address 104.21.71.34, which is associated with Cloudflare infrastructure. As of July 29, 2026, the domain appears on one security blocklist and is specifically blocked by PhishDestroy.

VirusTotal reports that 15 out of 91 security vendors have detected this domain as malicious, confirming its elevated risk status. The domain's infrastructure and detection metrics suggest it is part of a broader phishing campaign, though the exact content and targeted brand remain unconfirmed due to the absence of detailed page analysis. Defenders should treat this domain as hostile and implement immediate blocking at the DNS or proxy level.

Network security teams are advised to monitor for connections to 104.21.71.34 and review logs for any interaction with goumad.cc, particularly in environments where credential theft could lead to unauthorized access. Given the domain's recent registration and active blocklist presence, continued vigilance is recommended until further analysis or takedown occurs.