fortiscapital-limited[.]com

Fortiscapital-limited.com was registered on September 7 2025 through Ultahost, Inc. and is currently hosted on the IP address 192.142.53.230, which resolves via the authoritative nameservers ns3.mywebvps2.com and ns4.mywebvps2.com. The domain appears on at least one public security blocklist and is explicitly blocked by the PhishDestroy service, indicating that it has been observed delivering credential‑harvesting content. VirusTotal scans have resulted in two of ninety‑one AV engines flagging the domain, providing additional corroboration of malicious activity. The domain’s status is listed as active as of the report date, July 27 2026, and no evidence of takedown or remediation has been recorded.

Publicly available data do not include a page title, SSL/TLS certificate details, HTTP response codes, or any threat‑intel identifiers from OTX or similar feeds, leaving the exact nature of the hosted payload uncertain. The lack of observed page metadata means that analysts cannot confirm which brand or service the site purports to emulate, nor can they describe the specific phishing lure employed. Nevertheless, the convergence of blocklist inclusion, PhishDestroy detection, and multiple AV flags establishes a high confidence that fortiscapital‑limited.com is being used for credential harvesting. Defenders should treat the domain as hostile.

Recommended actions include adding the domain and its resolving IP address to network‑level deny lists, updating DNS filtering policies to block queries to ns3.mywebvps2.com and ns4.mywebvps2.com, and monitoring for any outbound connections to the host. Endpoint security solutions should be configured to flag any URLs containing “fortiscapital‑limited.com”. Continuous re‑evaluation is advised in case additional intelligence, such as page content or SSL fingerprints, becomes available.