fl[.]gqdmvf[.]cc

fl.gqdmvf.cc was registered on June 12 2026 through NameSilo, LLC. Within weeks of its creation the domain appeared on multiple threat intelligence sources. VirusTotal records show that 13 of 91 scanning engines have flagged the domain for malicious activity, indicating a non‑trivial detection rate. The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy mitigation service.

No additional public reputation feeds such as Google Safe Browsing or AlienVault OTX have published entries for the domain at the time of analysis, and no SSL certificate details or hosting IP information have been released in the current dataset. The limited visibility suggests that the infrastructure may be newly provisioned or deliberately kept low‑profile. Defenders should add fl.gqdmvf.cc to outbound and inbound filtering rules, monitor DNS query logs for any resolution attempts, and consider pre‑emptively blocking the domain at perimeter devices.

Continuous re‑evaluation is advised, as future scans may increase the detection count and additional blocklists could surface. Organizations that employ email security gateways should ensure that URLs pointing to this domain are quarantined, and incident response teams should treat any credential submissions to the domain as compromised. Until further forensic evidence is obtained, the domain should be treated as an active phishing vector with elevated risk.