goumvcn[.]cc

The domain goumvcn.cc was registered on June 12, 2026 through Dominet (HK) Limited. It is currently listed on one public blocklist and has been blocked by PhishDestroy. VirusTotal analysis indicates that 15 of 91 security vendors flag the domain as malicious, reflecting a moderate consensus of suspicious behavior. The campaign is classified as generic phishing with an elevated risk level and remains active as of the report date.

No publicly disclosed IP address, hosting ASN, SSL certificate details, or HTTP status are available, and the page title has not been captured, leaving the exact impersonated brand or lure uncertain. Given the recent creation date, the infrastructure appears to be in early deployment, which aligns with the modest detection footprint. The presence on a single blocklist suggests initial community reporting, while multi‑vendor detection on VirusTotal demonstrates that automated scanners have already identified malicious patterns.

Defenders should block the domain at perimeter filters, add it to internal blocklists, and monitor for any outbound traffic to goumvcn.cc. Threat hunters should correlate internal DNS queries for the domain with user activity logs to detect potential credential‑harvesting attempts. Until additional forensic artifacts become available, the safest posture is to treat the domain as hostile and prevent any connections, while continuing to re‑evaluate as new intelligence emerges.