fl[.]goumvci[.]cc

The domain fl.goumvci.cc was registered on June 12, 2026 through Dominet (HK) Limited and first appeared on a security blocklist on the same day. As of the report date, July 29, 2026, the domain is listed as active with an elevated risk rating. It is currently blocked by the PhishDestroy blocklist, indicating that at least one defensive feed has taken mitigation action.

VirusTotal analysis shows that eight of ninety‑one scanning engines have flagged the domain, suggesting a non‑trivial level of malicious confidence among the participating vendors. The limited public intelligence does not provide details on hosting IP addresses, ASN, geographic location, SSL certificate parameters, HTTP response codes, or page title content, leaving those vectors unverified at this time. The lack of broader blocklist coverage—only a single known list—means that additional telemetry may be required to fully assess the prevalence of the threat.

Defenders should incorporate fl.goumvci.cc into URL filtering policies, update endpoint and network threat intelligence feeds, and monitor for any emergent indicators such as new host resolutions or associated command‑and‑control activity. Ongoing observation of VirusTotal re‑scans and any future blocklist inclusions will be essential for maintaining an up‑to‑date risk posture. The current evidence base supports proactive blocking while awaiting further technical artefacts that could clarify the hosting infrastructure and potential payload delivery mechanisms.