fortkims[.]top

PhishDestroy identifies the domain fortkims.top as an active generic phishing campaign currently under investigation. The threat involves credential theft, with the domain impersonating no specific brand but likely targeting unsuspecting users through deceptive login pages. The infrastructure remains operational and poses a moderate risk to visitors interacting with the site.

This domain was flagged by 0 of 95 VirusTotal vendors, indicating it has not yet been widely detected as malicious. Registered through Global Domain Group LLC, fortkims.top resolves to IP address 188.114.96.3 and was created on March 08, 2026. The domain uses a Let’s Encrypt SSL certificate, further enhancing its legitimacy to potential victims. As of this report, no blocklist entries or trust score metrics are publicly available, leaving the door open for potential expansion of this campaign.

The domain remains active, and concrete action is required to mitigate risk. Users should avoid interacting with fortkims.top and report any suspicious activity to their security teams. Blocking the domain at the network level is recommended, and organizations should update threat intelligence feeds to include this domain. Security teams are advised to monitor for similar domains registered by Global Domain Group LLC and to deploy email filtering rules targeting newly registered domains with similar naming patterns.