fortressfi[.]net

Analysis of fortressfi.net indicates that the domain was registered on 21 February 2026 and is presently offline. The site presented a page title suggesting a cryptocurrency exchange offering Bitcoin, Ether and altcoins, and it was identified as impersonating the Avalanche brand. Network resolution points to IP 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate is listed as “WE1”, indicating a potentially self‑signed or low‑trust certificate.

Threat‑intelligence feeds show that the domain is listed on a single security blocklist and has been blocked by PhishDestroy. Reputation scoring from Gridinsoft rates the domain at 0 / 100, reflecting a lack of trust. VirusTotal analysis recorded a single positive detection out of 93 scanning engines, confirming that at least one vendor flagged the site as malicious. The combination of a brand‑impersonation claim, a crypto‑exchange narrative, low trust scores, and the single detection aligns with a crypto‑scam profile.

Uncertainties remain regarding the specific payload or credential‑harvesting mechanisms, as no page content beyond the title has been publicly examined. Defenders should add fortressfi.net to blocklists, monitor traffic to the associated Cloudflare IP, and treat any communications referencing the Avalanche brand or cryptocurrency transactions from this domain as malicious. Ongoing surveillance of the IP address and related sub‑domains is recommended, as the infrastructure may be reused for future campaigns.