goumvcs[.]cc

This domain, goumvcs.cc, is actively flagged as a phishing threat targeting Microsoft 365 credentials. Registered on September 27, 2025, through Dominet (HK) Limited, the domain appears on one security blocklist, specifically PhishDestroy, and is detected by 15 of 91 security vendors on VirusTotal as of the latest scan. The elevated risk classification is supported by these detection metrics, though the exact phishing kit or lure content remains unconfirmed due to limited public analysis.

Infrastructure analysis reveals no additional hosting or SSL certificate anomalies beyond standard registrar details, but the domain's recent creation and blocklist presence align with typical phishing campaign timelines. Defenders should treat this domain as hostile infrastructure. Recommended actions include blocking all outbound connections to goumvcs.cc at the network perimeter, updating endpoint protection rules to classify the domain as malicious, and monitoring for user reports of Microsoft 365-themed phishing attempts.

While the domain's current HTTP status and SSL certificate details are not provided, the existing detections and blocklist inclusion justify immediate containment. Further investigation into associated IPs or redirect chains may reveal broader campaign linkages, but no such data is currently available in the intelligence feed. Organizations using Microsoft 365 should prioritize user education about credential phishing risks, given the domain's confirmed targeting of this platform.