Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@cyberaegis.casa.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
fortcost[.]com
The domain fortcost.com was registered on 23 March 2026 through MAT BAO CORPORATION and is currently resolving to the IPv4 address 193.187.110.3. DNS resolution is served by the authoritative name servers a.dnspod.com, b.dnspod.com and c.dnspod.com. VirusTotal analysis shows that 11 of 91 security vendors flag the domain as malicious, indicating that a subset of scanners have identified suspicious activity associated with the host. The domain remains active as of the report date (15 July 2026) and no further public intelligence, such as page content or targeted brand, has been disclosed. The limited data suggests a high‑risk phishing operation, but the specific payload, victim profile, and attack vector remain unknown. Defenders should block traffic to 193.187.110.3 and to fortcost.com at the network perimeter, monitor DNS queries for the domain and its name‑server patterns, and employ endpoint detection to capture any potential credential‑harvesting attempts. Continuous re‑evaluation of VirusTotal and other threat‑intel feeds is recommended to capture any emerging indicators of compromise.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | fortcost.com |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
PD-20260715-5E65F1 Recipient: abuse@cyberaegis.casa Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive