fortichecked[.]shop

PhishDestroy first observed fortichecked.shop on Aug 25, 2026. The captured page title is “503 Service Temporarily Unavailable”. Current evidence score: 92/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 14 detections among 91 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Lionic, Netcraft, Seclookup, Sophos, VIPRE, Webroot on Aug 25, 2026 at 14:50 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 2 community pulse references (not vendor detections) on Aug 25, 2026 at 16:34 UTC. The separate external-blocklist snapshot contained no matches on Aug 25, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Aug 25, 2026 at 16:33 UTC. URLScan captured the page on Aug 25, 2026 at 14:41 UTC.

The collector marked the hostname reachable on Aug 25, 2026 at 14:41 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 104.21.47.188. The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Sep 30, 2026; checked Aug 25, 2026 at 16:02 UTC.

The content indicators and 2 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.