ct[.]goumu[.]cc

The domain ct.goumu.cc is currently assessed as a significant phishing threat, based on multiple convergent threat intelligence indicators. Detection data reveals that 15 out of 91 security vendors have flagged this domain for malicious activity, indicating a broad consensus in the security community regarding its risk profile. The domain appears on at least one recognized security blocklist, specifically PhishDestroy, further substantiating its association with known malicious infrastructure. Network analysis shows that ct.goumu.cc resolves to IP address 188.114.97.3 and was registered through Dominet (HK) Limited on June 12, 2026.

The hosting and registrar details suggest the use of infrastructure commonly associated with transient or high-risk domains, but there is no direct evidence linking the domain to a specific brand or phishing kit at this time. The domain remains active as of the report date. There is no available information regarding the site's actual content, SSL configuration, or HTTP response behavior; therefore, its precise operational tactics and possible brand targets, if any, are not confirmed.

Security and fraud response teams should block and monitor this domain and its associated IP address, given the elevated detection count and confirmed blocklist presence. Continued intelligence gathering is recommended to determine the full scope of activity and to validate potential user exposure. All evidence supports treating ct.goumu.cc as an elevated phishing risk, with targeted credential theft being the most likely threat vector based on current detection patterns.