fortprice[.]buzz

Analysis of fortprice.buzz as of August 1, 2026 confirms an active phishing domain targeting retail reward programs. The domain is flagged by PhishDestroy and appears on one security blocklist, indicating confirmed malicious activity. Infrastructure analysis reveals the domain resolves to IP address 193.187.110.3, with nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com, a pattern commonly associated with bulletproof hosting providers used in phishing campaigns. The SSL certificate is issued by Let's Encrypt (YE2), a legitimate certificate authority often exploited by threat actors to lend false credibility to malicious sites.

Three of 91 security vendors on VirusTotal have detected the domain as malicious, providing additional technical confirmation of its threat status. The exact content and target brand of the phishing site remain unconfirmed as no page title or brand details were provided in available intelligence. Defenders should treat fortprice.buzz as a high-risk domain and implement immediate blocking at the DNS and web proxy levels.

Network security teams are advised to monitor for connections to 193.187.110.3 and associated domains using the same nameserver infrastructure. Given the domain's active status and detection by multiple security sources, organizations should prioritize this domain in threat intelligence feeds and update endpoint protection rules accordingly. No evidence currently links this domain to a specific phishing kit or campaign, limiting attribution beyond its generic classification as a phishing site.