goumv[.]cc

Analysis of the domain goumv.cc indicates that it was registered on 12 June 2026 through Dominet (HK) Limited. The domain resolves to the IP address 172.67.136.136, which is part of the Cloudflare network commonly used for fast‑flux and proxy hosting. Goumv.cc appears on a single public security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one anti‑phishing service has identified it as malicious.

VirusTotal has evaluated the domain, with 15 out of 91 scanning engines returning a positive verdict, reinforcing the suspicion of phishing activity. No additional intelligence such as Safe Browsing or Open Threat Exchange entries is currently available, and the web page content, HTTP status code, SSL certificate details, and page title have not been publicly disclosed. Consequently, while the infrastructure signals compromise, the precise phishing payload or targeted brand remains unknown.

Defenders should immediately add goumv.cc to DNS‑based deny lists and firewall block rules, monitor outbound connections to 172.67.136.136, and enforce URL filtering that references the PhishDestroy blocklist. Continuous re‑scanning with VirusTotal and periodic checks of the registrar’s WHOIS record are recommended to capture any future changes to the domain’s hosting or ownership. Organizations that employ security‑aware email gateways should also flag any communications containing links to goumv.cc as high‑risk until further verification is possible.