fortwatch[.]top

This domain, fortwatch.top, is identified as an active credential theft operation targeting users of the popular gaming platform Fortnite, operated by Epic Games. The site employs brand impersonation tactics, presenting itself as a legitimate Fortnite Inventory Checker to deceive victims into entering account credentials. Analysis of the page title, 'Fortnite Inventory Checker | Epic Games,' confirms the attempt to mimic official Epic Games branding, a common technique in credential harvesting schemes. No evidence of a crypto drainer kit or payment redirection was observed, distinguishing this as a pure credential theft threat rather than a financial asset compromise operation. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain was registered on March 9, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, hosted on AS13335 Cloudflare, Inc., a network commonly used to obscure origin servers. Security vendor analysis on VirusTotal flags the domain as malicious by 17 out of 95 engines, while it appears on one security blocklist and is actively blocked by PhishDestroy. The domain employs a Let's Encrypt SSL certificate (serial number E8), which, while providing encryption, is routinely exploited by threat actors to lend a false sense of legitimacy. As of the latest assessment, fortwatch.top remains active and continues to pose a high risk to users. The combination of brand impersonation, recent registration, and Cloudflare-hosted infrastructure suggests a deliberate effort to evade detection while maximizing victim engagement. Users are strongly advised to avoid interacting with the domain, and organizations should implement network-level blocking for 188.114.96.3 and fortwatch.top. Given the domain's persistence and lack of takedown, ongoing monitoring and reporting to relevant abuse channels are recommended to mitigate further credential theft attempts.