fortstats[.]lol

PhishDestroy identifies fortstats.lol as an active generic phishing domain currently under investigation for impersonating a stats tracking portal. Registered on April 06, 2026 via Global Domain Group LLC, the domain resolves to IP 172.67.154.100 and is secured with a Let's Encrypt SSL certificate. No publicly documented drainer kit has been observed yet; the threat is categorized as a generic phishing lure targeting users who may be expecting legitimate analytics access.

Technical indicators confirm this domain remains undetected across major defenses: VirusTotal shows 0 detections out of 95 engines as of the latest scan. The domain was created on April 06, 2026, is registered through Global Domain Group LLC, and resolves to IP 172.67.154.100 with a valid Let's Encrypt certificate. It has not yet been flagged by Google Safe Browsing (GSB) and is not listed on major blocklists, indicating a newly emerged or stealthily operated campaign.

Current status is active with risk categorized as under investigation. No public takedown or blocklisting actions have been applied yet, leaving potential exposure to users interacting with this domain. While the immediate risk is low due to low detection, the absence of mitigations suggests a need for prompt user caution and organizational monitoring. PhishDestroy advises blocking fortstats.lol at the network perimeter and educating users to avoid entering credentials on unauthorized stats portals. Remaining risk is moderate given the domain’s recent creation and lack of historical reputation.