goumvcx[.]cc

This domain, goumvcx.cc, is actively flagged as a phishing infrastructure targeting Microsoft 365 credentials. Analysis indicates an elevated risk profile based on multiple technical indicators. The domain was registered on September 27, 2025, through Dominet (HK) Limited, a registrar frequently associated with abusive registrations. As of July 29, 2026, it resolves to the IP address 188.114.97.3, which is part of a network segment previously linked to phishing campaigns.

The domain appears on at least one security blocklist and is actively blocked by PhishDestroy, a specialized anti-phishing service. VirusTotal telemetry shows that 15 of 91 security vendors classify this domain as malicious, reinforcing its association with credential harvesting activity. While the exact content of the site has not been fully analyzed, the combination of its recent registration, hosting on a high-risk IP, and detection by multiple security vendors suggests it is part of an active phishing operation.

Defenders should treat this domain as compromised infrastructure and implement immediate blocking measures. Network security teams are advised to monitor for connections to 188.114.97.3 and review logs for any interaction with goumvcx.cc, particularly in environments where Microsoft 365 credentials are used. Further investigation into the hosting provider and registrar may reveal additional related domains or infrastructure used in this campaign.