fl[.]goumv[.]click

The domain fl.goumv.click was registered through GMO Internet, Inc. d/b/a Onamae.com and first appeared on the DNS on June 12, 2026. VirusTotal analysis shows that 14 of 91 security vendors have flagged the domain as malicious, indicating a measurable consensus among scanners that the site is being used for abusive purposes. The domain is currently listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one operational anti‑phishing platform has taken protective action against it.

The threat classification supplied in the intelligence is "generic phishing" with an elevated risk level, and the domain status is reported as active, meaning the infrastructure is still reachable and may be serving malicious content. No additional infrastructure details such as IP address, hosting ASN, SSL certificate data, or HTTP response codes are available in the provided dataset, and the page title or any brand references have not been disclosed, leaving the exact content of the site unverified.

Defenders should prioritize adding fl.goumv.click to local blocklists, enforce DNS‑level filtering, and monitor outbound traffic for connections to the domain. Continuous re‑scanning with multi‑vendor platforms is advisable to capture any changes in detection rates, and security teams should watch for related domains registered through the same registrar that may share the same threat actor infrastructure.