ca[.]goumg[.]cc

PhishDestroy identifies ca.goumg.cc as a generic phishing domain with elevated risk, currently offline. The domain impersonates Canadian government services, likely targeting users for credential theft. No specific drainer kit was identified, but the phishing kit may have been designed to capture login credentials for government portals.

Technical indicators: VirusTotal score 9/95 security vendors flagged the domain as malicious. Registrar information is not disclosed in the provided data. The IP address was likely associated with a hosting provider used for malicious campaigns. Creation date is unknown. Google Safe Browsing status is not listed. The domain has been flagged by multiple blocklists, contributing to the 9/95 detection rate.

Current status: offline. Response actions include takedown by the hosting provider or registrar. Remaining risk is low as the domain is no longer active, but users who may have visited the site before takedown and entered credentials should change passwords and enable multi-factor authentication. PhishDestroy recommends monitoring for similar domains as threat actors may register new domains with slight variations.