goumvci[.]cc

Analysis of the domain goumvci.cc shows an active generic phishing infrastructure first observed on June 12, 2026. Registration data attributes the domain to Dominet (HK) Limited, a registrar known for rapid provisioning of short‑lived domains. VirusTotal scans report that nine of ninety‑one anti‑malware engines flag the domain, indicating moderate consensus among detection tools. The domain is presently listed on a single security blocklist and is actively blocked by the PhishDestroy filtering service, reflecting that at least one reputable anti‑phishing organization has taken mitigation steps.

Risk scoring assigned to the domain is elevated, consistent with its recent creation date and limited detection history. No additional technical artifacts such as IP address, hosting ASN, SSL certificate details, or page title are currently available in public repositories, leaving the full scope of the hosting environment and content unknown. Defenders should treat goumvci.cc as a high‑confidence phishing indicator and incorporate the domain into URL filtering, DNS sinkholing, and email gateway block lists.

Continuous monitoring of VirusTotal and other threat‑intelligence feeds is advised to capture any escalation in detection counts or the appearance of new blocklist entries. Organizations employing endpoint detection and response (EDR) solutions should also watch for any network traffic to goumvci.cc, as the domain may serve as a command‑and‑control conduit or credential‑harvesting landing page. Given the limited public evidence, threat hunters should prioritize verification of any internal logs that reference the domain and consider retroactive analysis of compromised accounts that may have interacted with the site since its inception.