ftb[.]com-myhtj[.]vip

This domain, ftb.com-myhtj.vip, was registered on June 12, 2026, through NameSilo, LLC, and is currently flagged as a generic phishing threat with an elevated risk level. Analysis indicates the domain appears on one security blocklist, and ten of ninety-one security vendors on VirusTotal have detected malicious activity associated with it. The domain resolves to IP address 104.21.96.1, which is part of Cloudflare's infrastructure, a common hosting choice for both legitimate and malicious sites due to its privacy and proxy services. The use of Cloudflare complicates direct attribution and may obscure the true origin of the phishing content.

No specific brand impersonation details, phishing kit identifiers, or page content analysis are available in the current intelligence. However, the domain structure, combining 'ftb' (a common abbreviation for financial institutions) with a randomized suffix, suggests an attempt to mimic a banking or financial service portal. Defenders should treat this domain as actively malicious and prioritize blocking it at the DNS and web proxy levels.

Given its recent registration and detection by multiple security vendors, further monitoring for related infrastructure (e.g., subdomains, associated IPs) is recommended. If internal logs show user interaction with this domain, immediate incident response actions, including credential resets and device scans, are advised. The domain is currently blocked by PhishDestroy, corroborating its malicious classification.