fl[.]gqdmva[.]cc

This domain fl.gqdmva.cc was registered on June 12, 2026 through NameSilo, LLC. It is currently listed as active in a generic phishing campaign and has been blocked by the PhishDestroy sinkhole. VirusTotal scans show that 13 of 91 security engines returned a positive detection, indicating that multiple anti‑malware products consider the host malicious. The domain also appears on a single external blocklist, reinforcing the notion that it is being used for abusive purposes.

No additional infrastructure details such as resolved IP address, hosting provider, SSL certificate fingerprint, or HTTP status code have been disclosed publicly, so the underlying server profile remains unknown. Likewise, Safe Browsing, OTX, and other reputation services have not published a verdict for this host at the time of analysis. Defenders should treat any traffic to fl.gqdmva.cc as hostile.

Immediate actions include adding the domain to local deny lists, configuring firewall egress rules to block DNS resolution, and updating proxy filters to drop HTTP/HTTPS requests. Monitoring for related indicator families, such as the same registrar or similar second‑level domains, may help uncover additional payload infrastructure. The presence of multiple vendor detections and a blocklist entry suggests a non‑trivial risk, and continued observation is recommended.