fortball[.]sbs
Fortball.sbs is an active domain created on 22 May 2026 and hosted on the IP address 158.94.211.169. The domain is delegated to the DNS service a.dnspod.com, b.dnspod.com and c.dnspod.com, and it was registered through Hostinger Operations, UAB. No SSL certificate is presented for the site, indicating that communications are unencrypted. VirusTotal scans have recorded detections from five of ninety‑one security vendors, which aligns with the classification of generic_phishing and the assigned high risk level. The infrastructure details suggest a typical fast‑deployment phishing setup, but the actual payload, landing page content and targeted brands have not been publicly disclosed. Defenders should add fortball.sbs to block lists, enforce DNS‑based filtering, and consider sinkholing the associated IP address. Continuous monitoring of the three dnspod nameservers for any changes, as well as periodic re‑scanning of the domain, is recommended to capture potential evolution of the threat. Because the domain lacks TLS, any attempted credential submission would be exposed in clear text, providing an additional indicator for detection systems. Organizations should update intrusion‑detection signatures to flag HTTP requests to this host and alert users about unsolicited communications that reference the domain.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
SHORTDOT ZONE · PUBLIC EVIDENCE
.sbs
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
PD-20260715-DC0F79 Recipient: abuse@hostinger.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive