fl[.]goumj[.]cc

The domain fl.goumj.cc was registered on June 12, 2026 via Dominet (HK) Limited, a registrar known for low‑cost bulk registrations. Within weeks of its creation the domain began appearing on security blocklists, and it is currently listed on one public blocklist. Multiple threat‑intelligence feeds have flagged the domain as a phishing‑related resource; fifteen of ninety‑one VirusTotal scanners have returned a malicious verdict, indicating that the payload or landing page is recognized by a subset of commercial anti‑malware engines.

Independent community filtering services have also taken action: PhishDestroy has added the domain to its deny list, preventing automated crawlers from reaching the site. No public IP address, SSL certificate details, or HTTP response codes are available in the current intelligence set, and the page title or any brand‑specific lures have not been disclosed. Consequently, the precise phishing vector—whether credential harvesting, account takeover, or other social‑engineering technique—cannot be confirmed at this time.

Defenders should proactively block fl.goumj.cc at perimeter firewalls and DNS resolvers, monitor outbound connections for attempts to resolve the domain, and incorporate the domain into endpoint and email security blocklists. Ongoing telemetry collection is advised to capture any future changes to hosting infrastructure, SSL deployment, or content signatures that could refine the threat profile.