checkyourfort[.]top

PhishDestroy identifies checkyourfort.top as an active credential harvesting domain masquerading as a legitimate security verification tool. This domain employs generic phishing tactics to deceive users into submitting sensitive login credentials under the guise of a 'fort check' or account validation process. No specific drainer kit or branded spoofing template has been observed in open-source intelligence, suggesting a low-sophistication but potentially high-impact campaign targeting users seeking quick security assessments. This domain surfaced on March 03, 2026, and is registered via Gname.com Pte. Ltd., resolving to IP address 172.67.215.168. Security vendor detection remains critically low, with only 2 out of 95 engines on VirusTotal identifying it as malicious as of current analysis. The domain utilizes a valid Let's Encrypt SSL certificate, which may enhance user trust and reduce suspicion during interaction. It has not been detected or blocked by Google Safe Browsing (GSB) at this time. The domain remains active and poses an elevated risk due to its plausible naming, recent registration, and SSL encryption. Immediate user action is required: avoid visiting checkyourfort.top entirely, and report the domain to your browser’s phishing blocklist or security vendor. Users who may have entered credentials should immediately change passwords and enable two-factor authentication on affected accounts. While current detection is low, proactive blocking and community reporting are essential to mitigate potential credential theft and downstream attacks. Remaining risk is elevated due to the domain’s active status and lack of widespread detection.