forteclock[.]cc

Analysis of the domain forteclock.cc, created on 25 May 2026 and currently active, shows a set of infrastructure indicators consistent with a phishing operation. The domain is registered through Dynadot Inc and uses three DNSPod nameservers (a.dnspod.com, b.dnspod.com, c.dnspod.com). DNS resolution points to the single IPv4 address 193.187.110.3, which is listed on one public security blocklist.

The domain has been added to the PhishDestroy blocklist, confirming that at least one external mitigation service has identified malicious intent. A VirusTotal scan performed by 91 antivirus and URL‑reputation engines returned no detections, but the absence of flags does not constitute evidence of legitimacy and should be considered alongside other indicators. No additional data such as page title, SSL certificate details, or HTTP response codes were supplied, leaving the content of the site unverified.

The lack of publicly available page metadata means that the exact phishing lure (e.g., credential harvesting, account takeover) cannot be confirmed, though the classification as generic phishing aligns with the known threat type. Defenders should continue to block traffic to forteclock.cc at the network perimeter, update URL filtering policies to include the observed IP address and the known blocklist entry, and monitor for any new resolutions or hosting changes. Continuous re‑scanning with multi‑engine services is advised, as the threat landscape may evolve and additional malicious payloads could be introduced without notice.