# m.fox-svip.cc — SUSPICIOUS

> Explore the safety status of m.fox-svip.cc, a suspicious domain flagged for social engineering. Learn if it’s safe to visit before you click.

## Summary
PhishDestroy identifies m.fox-svip.cc as a domain currently under investigation for phishing activities. Although no antivirus engines have flagged it on VirusTotal, its recent creation date and Google Safe Browsing's social engineering warning indicate potential risks. Users should approach this domain with caution as it might be designed to deceive.

This phishing attempt likely involves mimicking trusted services or brands to lure users into providing sensitive information. The page titled "OFX" may be used as a facade to trick visitors into entering credentials or personal data. The domain resolution to an IP address linked to suspicious activity further supports the concern.

If you have visited m.fox-svip.cc, it is advised to avoid submitting any personal or financial details. Users should run thorough antivirus scans and monitor accounts for unusual activity. Reporting the domain to phishing databases and using web filtering tools can help prevent exposure to similar threats in the future.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: OFX

## Domain Intelligence
- Registered: 2026-03-10 21:07:01
- Registrar: Gname.com Pte. Ltd.
- Country: SG
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: cesar.ns.cloudflare.com ingrid.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Forcepoint ThreatSeeker", "Google Safebrowsing", "SOCRadar"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content

### Page Text
Your request was blocked.

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd94c-250e-7701-8b0b-0f372721a942.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a57ee2b4-e4e1-4163-91a2-501794a49613
- PhishDestroy: https://phishdestroy.io/domain/m.fox-svip.cc/
- LLM endpoint: https://phishdestroy.io/domain/m.fox-svip.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/m.fox-svip.cc/
Last updated: 2026-03-15