goumvs[.]cc

goumvs.cc was registered on June 12, 2026 through Dominet (HK) Limited and currently resolves to the IP address 188.114.97.3. The domain is listed as active and carries an elevated risk rating. Independent analysis on VirusTotal shows that 13 of 91 security vendors have flagged the domain as malicious, indicating a moderate consensus among scanners.

The phishing‑specific blocklist provider PhishDestroy has already blocked the domain, and it appears on at least one additional security blocklist. These data points collectively suggest that the infrastructure is being used for a generic phishing campaign, although the precise lure or credential‑harvesting page has not been publicly disclosed. No information about SSL certificates, HTTP response codes, or page titles is available, leaving the exact content of the site unverified.

Defenders should treat goumvs.cc as a confirmed phishing host: the domain should be added to network and email filtering rules, the associated IP 188.114.97.3 should be blocked at perimeter devices, and threat‑intel feeds should be updated to reflect its presence. Continuous monitoring for any new resolutions or associated indicators of compromise is advised, as the operators may pivot to additional infrastructure. The elevated risk status and active blocklist entries warrant immediate remediation to prevent credential compromise.