ct[.]goumd[.]cc

The domain ct.goumd.cc was registered on June 12, 2026 through Dominet (HK) Limited and has been observed in active threat campaigns classified as generic phishing. It appears on a single security blocklist and is explicitly blocked by the PhishDestroy filtering service, indicating that at least one reputable anti‑phishing feed has deemed the host malicious. VirusTotal scans show that 15 out of 91 security vendors have flagged the domain, providing a modest but consistent detection signal across multiple independent scanners.

These detections suggest that the domain is associated with malicious activity, though the relatively low proportion of flags does not preclude further investigation. No additional data such as Safe Browsing status, Open Threat Exchange entries, IP address reputation, SSL certificate details, HTTP response codes, trust scores, page title, or evidence links have been published in the current intelligence set, leaving those vectors unverified at this time. Defenders should treat ct.goumd.cc as a high‑confidence phishing indicator based on its blocklist presence and vendor detections.

Immediate mitigation steps include adding the domain to network‑level deny lists, updating endpoint protection signatures, and configuring web proxies to block any HTTP(S) traffic to the host. Continuous monitoring is advised to capture any future changes in detection rates, reputation scores, or hosting infrastructure that could refine the risk assessment.