fortunetrustbk[.]com

PhishDestroy identifies fortunetrustbk.com as an active crypto drainer phishing domain designed to impersonate a bank login portal and steal cryptocurrency assets. The site leverages deceptive branding and urgency tactics to trick users into entering credentials or authorizing malicious transactions. Current analysis classifies the threat level as under investigation, but behavioral patterns closely align with high-risk crypto drainer operations observed on similar domains.

This domain was flagged by PhishDestroy with a VirusTotal detection ratio of 5/95 engines, indicating it currently evades automated antivirus scans. The registrar is TuringSign Inc. d/b/a Cosmotown, with the domain registered on August 17, 2025. It resolves to IP address 78.46.40.242 and uses a Let’s Encrypt SSL certificate, which does not indicate legitimacy. As of now, no public blocklists list the domain, and trust scores remain unmeasured due to its recent creation. The use of a free TLS certificate is a common tactic to appear legitimate at a surface level while hosting malicious content.

Given the identified threat type—crypto drainer impersonating a banking login—PhishDestroy recommends immediate caution. Users who have visited this domain should revoke any connected wallet approvals, change passwords elsewhere, and scan devices for malware. Never enter login credentials or approve transactions from this domain. Verify site safety on PhishDestroy’s public scanner using the domain or IP before any interaction. Block the domain and IP at the network level if possible. Report the domain to relevant authorities (e.g., IC3, Chainalysis) and cryptocurrency platforms to aid in takedown efforts.