VirusTotal
4 / 92
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@publicdomainregistry.com.
The latest stored availability evidence still shows the domain reachable; 7 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
fortfind.icu — Nicht bestätigt. Zusammenfassung der Beweislage: VirusTotal 4/92 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, SOCRadar); Spamhaus DBL_SPAM; PhishDestroy score 86/100. Registrar: PDR.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
4 / 92
DBL_SPAM
Report stored; detailed verdict not recorded
Melden3 community references
Meldenprovider verdict: suspicious
Meldengespeicherter Bericht
Melden Analyse abgeschlossen
MeldenChecked; no threat flag recorded
Meldenfortfind.icu was included in the PhishDestroy internal listing and received a PageSpeed performance score of 72, both recorded on 2026-10-06. OTX also recorded three pulses for this domain on the same date, highlighting its presence in multiple monitoring sources.
OTX documented three pulses related to fortfind.icu on 2026-10-06. VirusTotal checked the domain on 2026-09-25, reporting zero detections out of 92 scanners. The PhishDestroy internal listing included fortfind.icu as of 2026-10-06. A PageSpeed check on 2026-10-06 reported a performance score of 72. The domain was registered on 2026-09-25 with PDR Ltd. d/b/a PublicDomainRegistry.com.
These records show that fortfind.icu has been observed by several monitoring platforms, each providing a different perspective. OTX pulses suggest that the domain has been noted in community reporting, while VirusTotal found no detections during its scan. The PageSpeed score and inclusion in the PhishDestroy internal listing add technical and reputational context to its profile.
To evaluate fortfind.icu, consult the OTX pulse records and VirusTotal scan as primary references. Retain the PhishDestroy internal listing and PageSpeed performance data for ongoing comparison. Preserve all dated source records for future monitoring and to track any changes in the domain’s profile.
Gespeicherte Beobachtungen zum Vergleich zwischen Crawler und Browser für diesen Host sowie eine Echtzeit-Fingerabdruckprüfung für Verkehrsverteilungssysteme im Keitaro-Stil.
Anmerkung des Scanners: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='fortfind.icu', port=80): Max retries exceeded with url: / (Caused by NewConnectionError("S
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
a.dnspod.comb.dnspod.comc.dnspod.comLocation describes the IP network.
23df353beb5775b07f79753f1c1f2c94686ff049bceafd900929295552e48d12Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of fortfind.icu · checked Oct 6, 2026
46.29.26.38. 10 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
PD-20261006-5E1A64 Recipient: abuse@publicdomainregistry.com Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (GB): Computer Misuse Act 1990 Fraud Act 2006 Communications Act 2003 - Section 127 UK law criminalizes unauthorized computer access, fraud, and malicious communications. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Template-based draft · optional AI wording assistance requires separate consent
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenMelden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenAktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBeobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt