goumvcr[.]cc

The domain goumvcr.cc was registered on June 12, 2026 through Dominet (HK) Limited. DNS resolution returns the IPv6 address 2606:4700:3033::6815:48e3, indicating hosting on a provider that offers IPv6 services. VirusTotal has recorded 14 of 91 security scanners flagging the domain as malicious, which aligns with its classification as a generic phishing site. The domain is actively listed on the PhishDestroy blocklist and appears on one additional security blocklist, demonstrating that at least two independent threat‑intelligence feeds have identified it as harmful.

No public SSL certificate details, HTTP response codes, page title, or content snapshots have been published, so the exact phishing lure and targeted brand remain unknown. Absence of such data limits attribution but does not reduce the risk posed by the active infrastructure. Analysts can query passive DNS archives to verify whether the IPv6 address has been associated with other known malicious domains, and can examine certificate transparency logs for any TLS certificates that may have been issued for goumvcr.cc. The recent creation date suggests a short‑lived campaign, typical of phishing operations that rely on rapid domain turnover to evade reputation systems.

Defenders should add goumvcr.cc to DNS‑based deny lists, configure proxy and web‑gateway filters to block traffic, and monitor for outbound connections to the IPv6 address 2606:4700:3033::6815:48e3. Continuous re‑scanning with multi‑engine services is recommended to capture any evolution of the site’s payload or hosting changes. Security operations centers should prioritize alerts that reference this domain and correlate them with credential‑theft or login‑related events, while ingesting the blocklist entries from PhishDestroy and the additional blocklist source to ensure rapid containment.