yourflukeplace[.]shop

This domain, yourflukeplace.shop, is identified as a potential threat for credential theft. While no specific brand impersonation or crypto drainer kit has been detected, the domain exhibits several indicators of phishing activity, suggesting it was used to collect sensitive information from users.

Infrastructure analysis reveals that yourflukeplace.shop has a VirusTotal score of 6/95, indicating that a minority of security vendors flag it as malicious. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 172.67.191.84. It was created on February 27, 2026, and uses a Let's Encrypt SSL certificate. The Gridinsoft trust score is 0/100, and the domain appears on 3 security blocklists, including those maintained by MetaMask, PhishDestroy, and SEAL. The page title is simply 'Document', which is a common default title for uncustomized or generic pages, often used in phishing kits.

Currently, the domain is offline. Despite this, the threat remains elevated due to the historical flags and blocklist appearances. Immediate response actions should include monitoring for any resurrections of the domain and educating users on the dangers of credential theft. The remaining risk is significant, as the domain could be brought back online with minimal effort, posing a continued threat to unsuspecting visitors.