goumvct[.]cc

The domain goumvct.cc was registered through Dominet (HK) Limited on June 12, 2026 and is currently active. It resolves to the IPv4 address 104.21.87.7, which belongs to a Cloudflare edge node commonly used for fast content delivery. VirusTotal reports that 15 of 91 security vendors flag the domain, indicating a moderate level of detection across multiple scanners. The domain appears on at least one public security blocklist and is specifically listed by the PhishDestroy service, confirming that it has been identified as a phishing vector.

No additional public intelligence such as page titles, SSL certificate details, or HTTP response codes is presently available, so the exact content served by the site cannot be confirmed without direct analysis. The combination of a recent registration date, use of a high‑reputation CDN provider, and multiple vendor detections suggests that the operator is attempting to leverage reputable hosting to increase the likelihood of successful credential harvesting. The presence on a dedicated anti‑phishing blocklist further reinforces the suspicion that the domain is being used for credential‑stealing campaigns, possibly targeting users of popular online services. The 15/91 detection ratio on VirusTotal reflects a mixed signal; while some scanners have not yet flagged the host, the presence of any positive detections together with blocklist inclusion typically warrants immediate mitigation.

Given the lack of publicly disclosed SSL/TLS fingerprint or HTTP status, defenders should assume the site may serve malicious payloads upon request and enforce strict outbound filtering. Because the domain is actively resolving, network defenders should treat any traffic to goumvct.cc as malicious. Recommended actions include adding the domain to DNS and web‑proxy deny lists, updating intrusion‑prevention signatures, and monitoring outbound connections for attempts to reach the 104.21.87.7 address.