Fortskid.com was registered on May 24 2026 through Gname.com Pte. Ltd. and is currently resolving to the IPv4 address 158.94.211.169. The domain is served by the DNS provider dnspod.com, as indicated by the three authoritative nameservers a.dnspod.com, b.dnspod.com and c.dnspod.com. Within a few weeks of creation the domain appeared on a security blocklist and has been listed by PhishDestroy as an active generic phishing site.
VirusTotal scans show that 2 of 91 security vendors have flagged the domain, confirming that at least a minority of scanners consider it malicious. The limited detection coverage suggests that the site may be employing techniques that evade many AV engines, but the presence on a reputable blocklist and the early flagging by multiple vendors indicate a non‑trivial risk. The hosting IP 158.94.211.169 is not currently associated with any known benign services, and no additional reputation data such as ASN or country is provided.
Defenders should add fortskid.com and its resolving IP to perimeter firewalls, DNS filtering policies, and proxy blocklists. Continuous monitoring of the domain’s DNS records and periodic rescans on VirusTotal are recommended to capture any changes in detection status. Because the domain is only a few months old, threat actors may still be refining their campaign; therefore, security teams should treat any inbound traffic to fortskid.com as malicious and block or quarantine associated emails until further verification.