Analysis of the domain fortbox.my indicates that it was registered on June 24, 2026 through Global Domain Group LLC and uses the DNS service a.dnspod.com, b.dnspod.com, and c.dnspod.com. The domain resolves to the IPv4 address 193.187.110.3, which is currently active and reachable. VirusTotal has recorded two positive detections out of ninety-one scanned security vendors, confirming that at least a minority of scanning engines have identified malicious characteristics.
The domain is listed on a single public security blocklist and has been actively blocked by the PhishDestroy mitigation service. No additional infrastructure details such as ASN, geographic location, SSL certificate metadata, HTTP response codes, or page title have been disclosed, leaving the exact content and lure mechanisms unverified. Consequently, the precise brand or service being spoofed remains unknown, and the page’s visual or functional characteristics cannot be described.
Defenders should ingest the domain and its resolving IP address into inbound and outbound filtering controls, add the host to URL and DNS blocklists, and monitor for any future changes in detection scores or additional blocklist listings. Continuous observation of the associated IP and nameserver activity is recommended to detect possible pivoting or reuse of the infrastructure for other campaigns.