ct[.]goumr[.]cc

The domain ct.goumr.cc was registered on 12 June 2026 through Dominet (HK) Limited and currently resolves to the IPv4 address 188.114.97.3. VirusTotal has recorded detections from 13 of 91 scanned vendors, indicating that multiple security products have identified malicious behavior associated with the host. The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing its classification as a malicious resource.

Operational status is marked as active and the risk rating is elevated, suggesting ongoing use in a credential‑harvesting campaign. No additional intelligence such as SSL certificate details, HTTP response codes, or page‑title metadata has been released, so the exact content and lure technique remain unverified.

Defenders should treat any traffic to ct.goumr.cc as hostile, enforce outbound filtering, and consider adding the IP address 188.114.97.3 to network‑level deny lists. Continuous monitoring of the host for changes in detection counts or inclusion on further blocklists is advised, as well as periodic re‑scans with sandbox tools to capture any payloads that may be delivered if the site becomes active.