goumvcf[.]cc

The domain goumvcf.cc was registered on September 27, 2025 through Dominet (HK) Limited and currently resolves to the IP address 188.114.97.3. Independent threat‑intelligence feeds have flagged the domain as malicious: PhishDestroy lists it as blocked, and the domain appears on one external security blocklist. VirusTotal analysis shows that 15 of 91 security vendors have identified the domain as suspicious, indicating a non‑trivial detection rate across multiple scanning engines.

The elevated risk rating reflects the combination of recent registration, association with a known blocker, and vendor detections. While the specific payload or credential‑harvesting technique employed by goumvcf.cc has not been publicly disclosed, the available evidence is sufficient to classify the infrastructure as a generic phishing operation. Defenders should incorporate the IP 188.114.97.3 and the domain name into network‑level blocklists, enforce DNS filtering policies that deny resolution of goumvcf.cc, and monitor outbound traffic for connections to the listed host.

Continuous re‑evaluation is advised, as additional detection data may emerge from future scans or threat‑intel sharing platforms. Until further forensic details become available, the precautionary stance is to treat goumvcf.cc as a malicious entity and prevent user interaction with any services hosted at that address.