fl[.]kodmv[.]cc

The domain fl.kodmv.cc was registered on June 12 2026 through Dominet (HK) Limited, a registrar known for providing privacy‑friendly services. DNS resolution points the domain to the IP address 104.21.74.145, a host that is shared by multiple unrelated sites and does not appear to be associated with a dedicated phishing infrastructure. Within a single day of its appearance the domain was added to the PhishDestroy blocklist, indicating that at least one reputable anti‑phishing feed has identified it as malicious.

VirusTotal analysis shows that 12 of 91 security vendors have flagged the domain, reinforcing the view that it is being used for malicious purposes. The limited detection footprint—only one blocklist entry and a modest vendor count—suggests that the campaign may be in an early deployment stage or that it is targeting a narrow audience. No public Safe Browsing, OTX, or SSL certificate details are available, and the page title or any content‑level indicators have not been disclosed, leaving the exact phishing lure (e.g., credential harvesting, account takeover) uncertain.

Defenders should treat the domain as high‑risk: add fl.kodmv.cc to network deny lists, enforce DNS‑level blocking, and monitor traffic to its hosting IP for anomalous patterns. Continuous re‑evaluation is advised, as additional intelligence such as page content, HTTP response codes, or further vendor detections could clarify the threat vector and inform more granular remediation steps.