goumt[.]cc

Analysis as of July 29, 2026 shows that the domain goumt.cc was created on June 12, 2026 and registered through Dominet (HK) Limited. VirusTotal reports 16 of 91 security vendors flagging the domain, indicating that a subset of scanners have identified malicious characteristics. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, which corroborates its designation as a generic phishing infrastructure. The reporting platform assigns an elevated risk level and marks the domain status as active, implying that threat actors may still be operating the site.

Public intelligence does not reveal the hosting IP address, TLS certificate details, HTTP status codes, or page title, so content‑level attributes remain unknown. No Safe Browsing verdicts, Open Threat Exchange (OTX) entries, or additional blocklist references have been observed beyond the one listed source. The lack of broader blocklist coverage may reflect the domain’s recent age—approximately six weeks—consistent with fast‑turnover phishing campaigns that rely on brief registration periods to avoid detection. Given the registrar’s Hong Kong location, the adversary may have selected this jurisdiction to obtain a low‑cost, quickly provisioned domain.

Defenders should immediately add goumt.cc to network firewall deny lists and ensure endpoint protection solutions ingest the 16 vendor detections reported by VirusTotal. Continuous monitoring of threat‑intel feeds for new indicators such as resolved IPs, TLS fingerprints, or observed payloads is advised. Because the domain carries an elevated risk rating and is actively blocked, any outbound or inbound traffic to goumt.cc should be treated as malicious until confirmation that the associated infrastructure has been dismantled. Organizations are also encouraged to reinforce user awareness training regarding unsolicited communications that may direct victims to this domain.