fl[.]gqdmvs[.]cc

The domain fl.gqdmvs.cc was registered through NameSilo, LLC on June 12, 2026 and currently resolves to the IP address 188.114.97.3. It is listed on a single security blocklist, with PhishDestroy explicitly blocking the domain. VirusTotal analysis indicates that 12 of 91 security vendors have flagged the domain as malicious, reinforcing its classification as a generic phishing threat.

The intelligence source assigns an elevated risk level and marks the domain as active as of the report date, July 29, 2026. No additional metadata such as SSL certificate details, HTTP response codes, page title, or targeted brand information is available, leaving the precise phishing vector and content unverified. Consequently, uncertainty remains regarding the specific credential‑collection mechanisms, the hosting environment beyond the resolved IP, and any potential campaign infrastructure that may be associated with the domain.

Defensive recommendations include immediate network‑level blocking of the domain, incorporation of the IP address into DNS sinkhole configurations, and addition of the domain to internal blocklists. Continuous monitoring of DNS query logs for repeated lookups, periodic re‑scanning on VirusTotal to detect changes in vendor detections, and correlation with user‑reported phishing attempts are advised. Organizations should also educate users about unsolicited requests for credentials and enforce multi‑factor authentication to mitigate potential compromise should any victim interaction occur with this domain.