fl[.]goumvcn[.]cc

The domain fl.goumvcn.cc was registered on June 12, 2026 through Dominet (HK) Limited. Since its creation it has been flagged by multiple security services. PhishDestroy has already added the domain to its blocklist, and the domain appears on one additional public blocklist. VirusTotal reports that 15 of 91 scanned security vendors classify the domain as malicious, indicating a moderate consensus of detection.

The threat is catalogued as a generic phishing campaign and the current risk level is elevated with an active status. Infrastructure analysis shows no publicly disclosed hosting IP, SSL certificate details, or HTTP response codes; these elements have not been disclosed in the available intelligence. The absence of page‑title or brand information means the specific lure used by the site cannot be confirmed at this time. Nevertheless, the combination of recent registration, registrar location in Hong Kong, and multiple vendor detections points to a purpose‑built phishing infrastructure.

Defenders should immediately block fl.goumvcn.cc at perimeter firewalls, DNS resolvers, and proxy filters. Continuous monitoring of DNS queries for this FQDN is advised, as well as periodic re‑scans on VirusTotal or similar aggregators to capture any changes in detection scores. Because the domain is newly created, threat actors may employ it in short‑lived campaigns; adding it to internal blocklists reduces exposure while further forensic investigation of any associated network traffic is conducted. Organizations should also consider sharing observed indicators of compromise with industry‑wide threat‑intel platforms to accelerate collective mitigation.