fl[.]goumh[.]cc

The domain fl.goumh.cc was registered on June 12, 2026 through Dominet (HK) Limited. Within weeks of creation it attracted attention from multiple security services: 15 of 91 VirusTotal scanners flagged the domain, it appears on one external security blocklist, and PhishDestroy has actively blocked it. The threat classification is generic phishing and the risk level is listed as elevated while the operational status remains active.

No public page title, SSL certificate data, HTTP response codes, or hosting IP information have been disclosed in the current intelligence set, limiting the infrastructure analysis to registrar and detection metrics. The combination of a recent registration, multiple vendor detections, and inclusion on a blocklist indicates that the domain is likely being used to host credential‑ harvesting pages or other fraudulent content aimed at deceiving users.

Defensive teams should treat fl.goumh.cc as malicious: incorporate the domain into URL filtering and DNS sinkhole policies, ensure web proxies block any HTTP requests to it, and verify that endpoint protection signatures are updated to reflect its detection count. Continuous monitoring of VirusTotal, blocklist feeds, and any emerging OTX or threat‑intel reports is advised to capture further infrastructure details such as hosting IPs, SSL usage, or observed payloads that may appear as the campaign evolves.