fl[.]goumax[.]cc

fl.goumax.cc was registered on June 12, 2026 through Dominet (HK) Limited and has been observed in active phishing campaigns as of the report date, July 29, 2026. The domain is currently listed on a single security blocklist and has been blocked by the PhishDestroy feed. VirusTotal analysis shows that 14 of 91 scanning engines flag the domain as malicious, indicating a moderate level of consensus among security vendors.

The elevated risk rating reflects the combination of recent creation, active status, and multi‑engine detections. No public information is available regarding the hosting IP, ASN, SSL certificate, or HTTP response codes, and the page title or target brand have not been disclosed in the intelligence set. Consequently, the exact content of the site remains unverified, but the presence on a blocklist and the detection count suggest the infrastructure is being used for credential‑ harvesting or similar phishing activity.

Defenders should add fl.goumax.cc to URL filtering and DNS sinkhole rules, monitor outbound connections for any attempts to resolve the domain, and consider sharing the indicator with internal threat‑intel platforms. Continuous re‑scanning with VirusTotal and other sandbox services is advised to capture any changes in payload or hosting that may appear as the campaign evolves.