goumvcj[.]cc

Analysis indicates that the domain goumvcj.cc was registered on June 12, 2026 through Dominet (HK) Limited, a registrar based in Hong Kong. Within weeks of registration the domain appeared on a security blocklist, currently listed on one blocklist and actively blocked by the PhishDestroy service. VirusTotal has processed the domain and 15 of 91 scanning engines returned a positive detection, confirming the presence of malicious activity associated with the site. The detection count, combined with its inclusion on the PhishDestroy blocklist, suggests that the domain is being used for generic phishing operations, although the specific payload or targeted brand has not been disclosed in the available intelligence.

The limited visibility of the domain—only a single blocklist entry and a modest detection ratio—leaves some uncertainty regarding the scale of the campaign and the infrastructure behind it. No public IP address, hosting ASN, SSL certificate details, or HTTP response information have been published, preventing a deeper infrastructure correlation at this stage. Defenders should treat goumvcj.cc as hostile. Immediate mitigation steps include adding the domain to network‑level deny lists, configuring web‑proxy or secure web gateway policies to block any HTTP/HTTPS requests to the domain, and ensuring endpoint protection solutions are updated to include the latest VirusTotal signatures.

Continuous monitoring of threat‑intel feeds for additional blocklist entries or new detection counts is recommended, as further enumeration may reveal associated command‑and‑control hosts or credential‑harvesting pages. Organizations employing email filtering should also flag any messages containing links to goumvcj.cc for quarantine or deletion. Given the recent creation date, rapid adoption of the domain by threat actors is plausible; therefore, proactive blocking is advisable until the domain is definitively retired or taken down.