fortnows[.]top

This domain, fortnows.top, is identified as a high-risk phishing site specifically designed to impersonate the official Fortnite gaming platform. Analysis indicates the site operates as a fake login portal, likely intended to harvest user credentials or distribute malicious payloads under the guise of an inventory verification process. The domain is currently offline, but prior activity suggests it was actively targeting users seeking in-game items or account access. Infrastructure analysis reveals the domain was flagged by 20 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on May 17, 2026, an unusually future-dated registration that may signal bulk domain squatting or automated fraudulent activity. The domain resolved to the IP address 85.239.149.81 and appears on three security blocklists, including entries from PhishDestroy, PhishingArmy, and CERT-PL. Additional technical indicators include the use of Tailwind CSS, Nginx, and OpenResty, which are common in phishing kits due to their ease of deployment and obfuscation capabilities. The Gridinsoft trust score for this domain is 0/100, further confirming its malicious classification. Given the domain's current offline status, it may re-emerge under a different address or with altered infrastructure. Organizations and users are advised to proactively block the domain and its associated IP address in network security controls. Security teams should monitor for similar phishing patterns, particularly those impersonating gaming platforms or using future-dated domain registrations. End users should verify the authenticity of any login portals by cross-referencing official sources and avoid entering credentials on unverified sites, even if they appear visually identical to legitimate platforms.