goumz[.]cc

This domain, goumz.cc, was registered on 12 June 2026 through Dominet (HK) Limited and resolves to the IPv4 address 172.67.189.243, an address associated with the Cloudflare content‑delivery network. The domain appears on a single public security blocklist and has been actively flagged by the PhishDestroy mitigation service. VirusTotal analysis shows that 16 of 91 scanning engines have classified the domain as malicious, indicating a non‑trivial detection rate across industry‑wide scanners. No public page title, brand target, or phishing‑kit attribution has been disclosed in the available intelligence, and thus the exact victim‑facing content remains unverified.

Infrastructure analysis suggests the operator is leveraging a recent domain registration and a reputable CDN provider to obscure the true hosting environment, a tactic frequently observed in short‑lived phishing operations. The elevated risk rating reflects both the active blocking status and the multi‑vendor detection signals, despite the relatively low blocklist count. Defenders should consider adding goumz.cc to DNS‑based deny lists and monitoring outbound traffic for connections to 172.67.189.243. Network‑level controls that block HTTP/S requests to this host can prevent potential credential harvesting.

Continuous re‑validation of the domain’s reputation on VirusTotal and other sandbox services is advised, as additional detections may emerge. Organizations using domain‑based allow‑lists should review any exceptions that could inadvertently permit traffic to this address. Overall, the evidence points to an ongoing phishing infrastructure that warrants proactive mitigation.