goumvcm[.]cc

Analysis indicates that goumvcm.cc is currently active and classified as a generic phishing threat with an elevated risk rating. The domain was created on 12 June 2026 and is registered through Dominet (HK) Limited, suggesting a Hong Kong‑based registrar. DNS resolution points to the IP address 172.67.166.252, which is the sole address observed for this domain.

VirusTotal data shows that 16 of 91 security vendors have flagged the domain, providing a moderate level of detection consensus across multiple scanning engines. The domain appears on a single external blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing feed has taken mitigation action. The operational status is marked as active, and the threat type is recorded as generic phishing, meaning the site likely attempts to harvest credentials or personal data without targeting a specific brand.

No additional technical artifacts such as SSL certificate details, HTTP response codes, or page title information have been disclosed, leaving the exact phishing payload and landing‑page characteristics uncertain. Defenders should prioritize adding goumvcm.cc to inbound and outbound DNS filtering policies, enforce network‑level blocking of the associated IP address, and monitor for any related activity from the hosting provider. Continuous re‑scanning of the domain through multi‑vendor services is advised to capture any evolution in detection rates, and any newly observed indicators should be shared with threat‑intel communities to enhance collective defenses.