goumk[.]cc

Analysis as of July 29, 2026 indicates that the domain goumk.cc was registered on June 12, 2026 through Dominet (HK) Limited, a Hong‑Kong based registrar. The domain resolves to the IPv6 address 2606:4700:3034::6815:1902, which belongs to a cloud‑hosting provider operating a globally distributed network. VirusTotal records show that 15 of 91 scanned security vendors have flagged the domain, demonstrating a moderate consensus of malicious classification. The domain appears on one public security blocklist and is explicitly listed by the PhishDestroy feed, confirming that threat‑intelligence communities consider it a phishing vector.

The threat type is identified as generic phishing, and the risk level is elevated while the operational status remains active. No additional data such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts are currently available in the intelligence set, leaving the exact content and lure mechanisms unverified. The lack of further telemetry means that defenders cannot confirm whether the domain hosts credential‑harvesting pages, redirects, or other payloads, but the consensus from multiple vendors and blocklist inclusion strongly suggests malicious intent. Defenders should block goumk.cc at perimeter firewalls, DNS resolvers, and endpoint web filters.

Continuous monitoring of the associated IPv6 address is advised, as the hosting provider may serve additional malicious domains. Analysts should also query the domain against additional reputation services, retrieve SSL certificate information, and, if safe, perform a controlled fetch to capture any landing page artifacts for deeper attribution. Updating intrusion‑detection signatures to include the observed indicators will help mitigate exposure while the domain remains active.