fortas[.]lol

The domain fortas.lol was registered on April 15, 2026 through Global Domain Group LLC and is currently resolving to the IP address 172.67.179.104. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, indicating that it has already been identified as a phishing threat by at least one reputable anti‑phishing vendor. VirusTotal analysis shows that 15 of 91 security vendors have flagged the domain, reinforcing the suspicion of malicious activity.

The risk rating assigned to the domain is elevated and its status is active, meaning that the infrastructure is still operational and may be used to host phishing content or to facilitate credential harvesting. No additional public intelligence such as Safe Browsing alerts, Open Threat Exchange (OTX) entries, SSL certificate details, HTTP response codes, trust‑score metrics, or page‑title information is presently available for fortas.lol, and the exact nature of the phishing campaign (e.g., targeted brand or credential type) has not been disclosed in the current dataset. Defenders should prioritize immediate blocking of fortas.lol at perimeter firewalls, DNS resolvers, and proxy filters, and ensure that the associated IP 172.67.179.104 is also added to network‑level blocklists given its association with the flagged domain.

Continuous monitoring of DNS queries for this domain and the host IP is advised, as well as periodic re‑scanning on VirusTotal and other multi‑engine platforms to detect any changes in detection ratios. Organizations should also consider feeding the observed indicators into internal threat‑intel platforms to enrich correlation rules and to trigger alerts on any future activity that references the same registrar, hosting provider, or IP range.