fl[.]goumvcb[.]cc

The domain fl.goumvcb.cc was registered on June 12, 2026 through the registrar Dominet (HK) Limited. VirusTotal scans show that twelve out of ninety‑one antivirus and URL‑reputation engines have flagged the domain as malicious, indicating a measurable detection consensus despite the relatively recent age of the site. Independent threat‑intelligence feeds have added the domain to a single public blocklist, and the PhishDestroy service has already listed it as a prohibited address, confirming that at least one dedicated anti‑phishing platform considers it abusive.

The current risk rating is elevated and the operational status is marked as active, which together suggest that the domain is being used in ongoing campaigns rather than as a dormant placeholder. No publicly available data on the hosting IP address, TLS certificate, HTTP response codes, or page title have been disclosed, leaving the underlying infrastructure and the exact phishing vector unverified. Absence of these details limits the ability to attribute the site to a specific phishing kit or to map its command‑and‑control topology, and analysts should treat the lack of observable page content as a gap that warrants further probing.

Defenders are advised to immediately block fl.goumvcb.cc at perimeter firewalls, DNS resolvers, and proxy filters, and to monitor for any outbound connections to its resolved IPs. Adding the domain to internal blocklists and sharing the indicator with upstream threat‑share platforms will reduce the likelihood of credential harvesting against downstream users. Continuous re‑scanning with VirusTotal and periodic checks against emerging blocklists are recommended to capture any changes in detection scores or new intelligence that may emerge as the campaign evolves.