goamux[.]com

Analysis of the domain goamux.com indicates that it was registered on 23 July 2026 through the registrar Fewmoretaps OU operating as Trustname.com. The domain is hosted on the IP address 188.114.97.3 and uses Cloudflare nameservers luke.ns.cloudflare.com and ryleigh.ns.cloudflare.com. A single security blocklist currently lists the domain, and the anti‑phishing service PhishDestroy has already blocked it.

VirusTotal records show that the domain has been scanned by 91 antivirus and URL‑reputation vendors; none of the scanners reported a detection, but the absence of a flag does not constitute evidence of benign behavior. No public information about the site’s SSL certificate, HTTP response code, page title, or Safe Browsing status is available, and Open Threat Exchange entries have not been observed. Consequently, the observable infrastructure points to a newly created domain that is being leveraged for a generic phishing campaign, as indicated by the threat type assigned in the intelligence feed.

Defenders should consider adding goamux.com to network‑level deny lists, monitoring DNS queries for the associated Cloudflare nameservers, and correlating any traffic to the IP 188.114.97.3 with user‑reported credential‑theft incidents. Ongoing observation of VirusTotal and other reputation services is recommended to detect any future changes in detection status. Until further content analysis is performed, the domain should be treated as malicious.