fortenite[.]top

Analysis of the domain fortenite.top indicates that it is currently active and associated with a generic phishing operation. The domain was registered on 2026-03-05 through Global Domain Group LLC and is serviced by the DNSPod nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com. DNS resolution points to the single IPv4 address 158.94.211.169, which is the only observed hosting endpoint. The domain appears on one external blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one threat‑intelligence provider has identified it as malicious.

VirusTotal records show that the domain has been scanned by 95 antivirus and URL‑reputation engines; none of the engines have raised a detection at the time of the scan, but the absence of a detection does not constitute evidence of benign behavior. No public SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts are available in the current dataset, leaving the content of the site unverified. The lack of additional telemetry such as observed credential harvest pages or malware payloads creates uncertainty regarding the exact phishing vector and target audience.

Defenders should treat fortenite.top as a high‑confidence phishing indicator based on its blocklist presence and registrar metadata, and should proactively block network connections to 158.94.211.169 as well as DNS queries for the domain. Monitoring of DNS query logs for look‑alike domains and inclusion of the domain in email gateway deny lists is also recommended. Continuous re‑evaluation is advised in case new detections appear in sandbox or endpoint telemetry.