fl[.]goumvco[.]cc

Analysis of fl.goumvco.cc indicates an active credential phishing domain registered on June 12, 2026, through Dominet (HK) Limited. The domain resolves to IP address 172.67.185.109, which is currently flagged by one security blocklist and detected by 14 of 91 security vendors on VirusTotal as malicious. The infrastructure is blocked by PhishDestroy, suggesting targeted phishing activity.

No specific brand impersonation, phishing kit, or page content has been confirmed in available data, limiting classification to generic credential phishing. Defenders should treat this domain as elevated risk due to its recent registration, active detection by multiple security vendors, and inclusion on blocklists.

Network-level blocking is recommended, along with monitoring for related domains registered under the same registrar or hosted on the same IP. Further investigation into SSL certificates, HTTP response headers, and page content may provide additional context, but current evidence supports immediate containment measures.