forttresorique-ai-nl[.]com

Analysis of the domain forttresorique-ai-nl.com indicates active phishing infrastructure targeting users of AI-assisted trading platforms. The domain was registered on May 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to IP address 188.114.97.3, hosted under CloudFlare, Inc. in Canada. Infrastructure analysis reveals Cloudflare nameservers (bradley.ns.cloudflare.com and treasure.ns.cloudflare.com) and a Let's Encrypt SSL certificate (E7), suggesting a deliberate attempt to appear legitimate. The page title, 'Fort Tresorique | Officieel Platform voor AI-ondersteunde Handel,' explicitly references an AI-supported trading platform, which aligns with known phishing tactics aimed at financial or investment-themed scams. As of July 13, 2026, the domain remains active, returning an HTTP 200 status, and is flagged by one security blocklist (PhishDestroy). VirusTotal reports detection by 3 of 92 security vendors, while AlienVault OTX lists it in one threat intelligence pulse. Gridinsoft assigns a trust score of 0/100, further corroborating its malicious classification. No specific phishing kit or targeted brand beyond the page title has been confirmed. Defenders should prioritize blocking this domain at the DNS or proxy level, particularly in environments where financial or trading-related activity occurs. Monitoring for related domains using similar naming conventions (e.g., AI-trading themes) is recommended, as this may indicate a broader campaign. Given the domain's recent registration and active status, continued vigilance is warranted.