fl[.]goumx[.]cc

fl.goumx.cc was registered on 12 June 2026 through Dominet (HK) Limited, a Hong‑Kong registrar commonly used for short‑lived malicious sites. The domain has been added to the PhishDestroy blocklist and appears on an additional security blocklist, indicating that at least one commercial phishing‑filtering service is already denying access. VirusTotal has recorded 13 positive detections out of 91 scanned vendors, confirming that multiple anti‑malware engines consider the domain malicious.

No public DNS records, hosting IP, or SSL certificate details have been disclosed in the available intelligence, so the current hosting infrastructure remains unknown. Likewise, HTTP response codes, Safe Browsing status, and page‑title information have not been published, limiting insight into the specific content served. The evidence therefore points to an active generic phishing infrastructure that is being actively flagged by security products, but the exact payload, targeted brand, or lure technique cannot be confirmed without direct page analysis.

Defenders should continue to block fl.goumx.cc at perimeter filters, ensure that URL‑filtering solutions reference the PhishDestroy and other blocklists, and monitor DNS queries for the domain to detect any emerging resolution activity. Incident response teams should treat any traffic to the domain as potentially malicious and isolate affected hosts for forensic examination. Ongoing collection of hosting and page‑content data is recommended to refine attribution and to determine whether the domain is part of a broader campaign.