goumvcy[.]cc

The domain goumvcy.cc was registered on June 12, 2026 through Dominet (HK) Limited and currently resolves to the IP address 188.114.97.3. Security telemetry indicates that the domain is classified as generic phishing with an elevated risk rating and remains active as of the report date, July 29, 2026. VirusTotal analysis shows that 14 of 91 security vendors have flagged the domain, providing a modest but notable detection signal.

The domain appears on a single external blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one protective feed considers it malicious. No additional public reputation services, Safe Browsing checks, or OTX references are supplied in the available intelligence, leaving the broader community detection footprint unconfirmed. The infrastructure points to a single IPv4 host without further disclosed hosting details, which limits the ability to attribute the operation to a larger campaign or specific threat actor.

Defenders should prioritize blocking goumvcy.cc at perimeter defenses and ensure that endpoint protection solutions incorporate the 14 vendor detections from VirusTotal. Continuous monitoring of the IP 188.114.97.3 for new activity, as well as periodic re‑query of reputation feeds, is advised to capture any escalation or additional indicators that may emerge. Given the recent registration date, the domain may still be in an early deployment phase, and analysts should watch for associated domains or similar patterns that could indicate a broader phishing infrastructure.