fl[.]goumvcj[.]cc

Analysis of fl.goumvcj.cc indicates an active credential phishing domain with elevated risk. The domain was registered on June 12, 2026, through Dominet (HK) Limited, a registrar frequently associated with short-lived malicious infrastructure. As of July 29, 2026, 14 of 91 security vendors on VirusTotal flag the domain, reflecting moderate but consistent detection. The domain appears on one security blocklist and is actively blocked by PhishDestroy, confirming its classification as malicious.

Infrastructure review shows no additional hosting or IP details, limiting attribution. The exact phishing target or brand impersonation remains unconfirmed, as no page title, kit identifier, or scam type is available in current intelligence. Defenders should treat this domain as a live threat.

Recommended actions include blocking the domain at perimeter security controls, monitoring for connections from internal assets, and reviewing logs for prior interactions. If endpoint or proxy logs show recent access, initiate incident response procedures for potential credential compromise. Given the domain's age and detection rate, it is likely part of a larger, ongoing phishing campaign.