fl[.]krdmv[.]cc

Analysis of fl.krdmv.cc indicates that the domain is actively being used for phishing operations. The domain was registered on June 12, 2026 through Dominet (HK) Limited, a registrar known to host a variety of short-lived malicious zones. DNS resolution points to the IPv4 address 172.67.161.99, which is shared across multiple cloud‑based hosting services often abused for illicit content.

VirusTotal reports that 12 of 91 security vendors have flagged the domain, suggesting that a subset of scanning engines have observed malicious payloads or suspicious network behavior associated with the host. The domain appears on a single external blocklist and is explicitly listed by the PhishDestroy service, confirming that at least one dedicated anti‑phishing consortium has taken remediation action. No additional public reputation signals, such as Safe Browsing or OTX entries, are currently available for this host, and the page title or target brand have not been disclosed in the available intelligence.

Given the recent creation date, the limited detection history, and the presence on a phishing‑specific blocklist, defenders should treat fl.krdmv.cc as a high‑confidence phishing indicator. Recommended actions include adding the domain to network‑level deny lists, updating email gateway filters to block any URLs containing the domain, and monitoring outbound connections from internal assets to the resolved IP address for signs of data exfiltration. Continuous re‑evaluation is advised, as further analysis of the hosted content could reveal additional compromised credentials or targeted brands.