pa[.]goumw[.]click

This domain is flagged as a credential harvesting phishing threat with an elevated risk level. Analysis indicates the infrastructure was specifically designed to mimic legitimate authentication portals, tricking users into submitting sensitive login credentials. The domain poses a direct risk to corporate and personal accounts, particularly those associated with financial services or cloud-based platforms. Infrastructure analysis reveals the following technical indicators: the domain pa.goumw.click was registered on September 29, 2025, through GMO Internet, Inc. d/b/a Onamae.com. It appears on one security blocklist and is currently offline. VirusTotal detection rates show 14 out of 95 security vendors flagging the domain as malicious. No associated IP addresses or subdomains were provided in the initial intelligence, but the domain's recent creation date and low detection threshold suggest a targeted, short-lived campaign. Mitigation steps for this threat type include immediate blocking of the domain across all network security controls, including firewalls, email gateways, and web proxies. Organizations should conduct a retrospective search for any internal traffic to pa.goumw.click within the past 30 days to identify potential credential exposure. End-user training should emphasize the risks of entering credentials on unfamiliar portals, particularly those with recent registration dates. Security teams are advised to monitor for secondary indicators, such as similar domains registered through the same registrar or using the 'goumw.click' parent domain.