fortkey[.]shop

PhishDestroy identifies fortkey.shop as an active credential harvesting domain posing an elevated phishing threat.

This domain was flagged by 10 of 95 VirusTotal security vendors, resolving to IP 188.114.96.3 with a Let's Encrypt SSL certificate. The domain exhibits high-risk characteristics, including a low trust score and minimal operational history, which aligns with typical phishing infrastructure patterns.

Analysis reveals fortkey.shop is currently active and engaging in malicious activities. Technical indicators include the IP address 188.114.96.3, which has been associated with multiple phishing campaigns. The domain's SSL certificate from Let's Encrypt suggests attackers are leveraging free certificates to appear legitimate. With only 10 of 95 vendors detecting this threat, organizations should implement immediate blocklisting measures. Users are advised to avoid accessing this domain and report any suspicious interactions to their security teams. Enhanced monitoring of network traffic involving this IP is strongly recommended to prevent credential theft and potential lateral movement within compromised environments.