fortune-windriftzone[.]click

The domain fortune-windriftzone.click is currently active and classified as a high‑risk generic phishing site. Registration data shows the domain was created on April 15, 2026 through Dynadot, LLC, and the authoritative nameservers are aiden.ns.cloudflare.com and sierra.ns.cloudflare.com, indicating Cloudflare DNS hosting. DNS resolution points to IP address 188.114.97.3, which is located in Canada and belongs to Cloudflare, Inc. The web server presents a Let’s Encrypt certificate (issued by E8) and returns an HTTP 302 redirect, with the landing page title reported as "Document". Reputation signals include a Gridinsoft trust score of 0/100, placement on a single security blocklist, and a detection count of five out of ninety‑four VirusTotal scanners flagging the domain. The domain is also referenced in one AlienVault OTX pulse and has been blocked by the PhishDestroy blocklist. While the available intelligence confirms the domain’s phishing intent, the specific payload or target brand is not disclosed in the current data set. Analysts should continue to monitor the domain for any changes in hosting, content, or detection metrics, enforce blocklist updates, and consider sink‑holing the associated IP address to disrupt further malicious traffic. Defensive measures such as URL filtering, DNS sink‑holing, and endpoint alerts for redirects to this domain are recommended to mitigate exposure.