fl[.]goumvs[.]cc

The domain fl.goumvs.cc was registered on June 12, 2026 through Dominet (HK) Limited and is currently marked as active with an elevated risk level. DNS resolution points exclusively to the IPv4 address 188.114.97.3. A VirusTotal assessment shows that 15 of 91 security vendors have flagged the domain as malicious, indicating a consensus among a subset of scanners that the site is being used for illicit purposes.

The domain is explicitly blocked by the PhishDestroy service and appears on a single security blocklist, reinforcing the view that it is being treated as a threat by at least one external mitigation platform. No public information about SSL certificates, HTTP response codes, page titles, or content analysis is available at this time, so the precise nature of the phishing payload or targeted brand cannot be confirmed. The limited visibility leaves uncertainty around the full attack vector, but the combination of registrar data, IP address, vendor detections, and blocklist inclusion provides sufficient evidence for defensive action.

Organizations should add fl.goumvs.cc and its resolving IP 188.114.97.3 to network deny lists, monitor DNS queries for the domain, and enforce outbound traffic controls to the identified address. Continuous re‑scanning on VirusTotal and other sandbox environments is recommended to capture any evolving malicious behavior. Integrating the domain into threat‑intelligence feeds will enable rapid propagation of blocks across security controls, reducing the likelihood of successful phishing attempts against users.