fl[.]goumvcw[.]cc

Analysis of the domain fl.goumvcw.cc indicates elevated risk of credential-harvesting activity targeting users through generic login-portal phishing. The domain was registered on June 12, 2026, via Dominet (HK) Limited, a registrar frequently observed in recent phishing campaigns. As of July 29, 2026, the domain remains active and has been flagged by 13 of 91 security vendors on VirusTotal, a detection ratio consistent with known phishing infrastructure. Additionally, the domain appears on at least one security blocklist and is actively blocked by PhishDestroy, further corroborating its malicious classification.

Infrastructure analysis reveals no associated IP addresses or autonomous system details in the current dataset, limiting attribution to specific hosting providers or geolocations. The absence of Safe Browsing or Open Threat Exchange (OTX) records suggests the domain may not yet have been widely disseminated or may employ evasion techniques to delay detection. No SSL certificate details, HTTP response codes, or page titles are available in the provided intelligence, preventing further assessment of the site’s content or intended brand impersonation. Defenders are advised to treat fl.goumvcw.cc as an active phishing threat.

Network-level blocking is recommended, particularly for organizations with exposure to credential-based attacks. Given the domain’s recent registration and detection by multiple security vendors, monitoring for related domains registered through Dominet (HK) Limited may aid in identifying additional malicious infrastructure. Further analysis of the site’s content, if accessible, could clarify the specific brand or service being impersonated, though no such details are currently available in the evidence.