goumvcu[.]cc

The domain goumvcu.cc was registered on June 12, 2026 through Dominet (HK) Limited, a registrar known for low‑cost registrations. Within weeks of creation the domain appeared on a security blocklist and was subsequently flagged by PhishDestroy as an active generic phishing infrastructure. VirusTotal scans show that 16 of 91 security vendors have flagged the domain, indicating a moderate level of consensus among detection engines. The intelligence rating assigns an elevated risk level and the current operational status is listed as active.

Analysis of publicly available data reveals that the domain’s hosting details, IP address, SSL certificate information, and HTTP response codes have not yet been disclosed in open sources. Likewise, the page title and any observed brand targeting are absent from the current dataset, preventing a more granular attribution of the phishing campaign. The limited visibility into the underlying web server and content means that defenders cannot confirm whether the site hosts credential‑stealing forms or redirects to additional malicious sites, but the existing detection signals are sufficient to treat the domain as hostile. Given the combination of recent creation, registrar profile, blocklist inclusion, and multi‑vendor detection, security teams should proactively block goumvcu.cc at perimeter defenses and DNS filtering layers.

Continuous monitoring of threat‑intel feeds for any newly published indicators—such as resolved IP addresses, SSL fingerprints, or observed payloads—is advised. Organizations should also consider adding the domain to internal watchlists and reviewing any outbound traffic that may be attempting to reach the domain, as the elevated risk rating suggests a higher likelihood of credential compromise. Until further forensic evidence becomes available, the precautionary stance of full denial of access remains the recommended mitigation.