fortnite[.]beer

PhishDestroy identifies the domain fortnite.beer as an active Fortnite-brand impersonation page designed for credential theft and account takeover. The site is currently categorised as a generic phishing threat and remains reachable as of the latest assessment window.

This domain was flagged by 3 of 95 VirusTotal security vendors, registered through Dynadot Inc on April 05, 2026, and resolves to the IPv4 address 217.60.39.100. PhishDestroy registers no existing blocklist entries for this domain as of the seed d70b8a sampling; however, its recent creation and low detection rate indicate active deployment within the last 90 days. The Let’s Encrypt SSL certificate in use suggests an attempt to appear legitimate, though its certificate transparency log issuance occurred only days after domain creation, a common pattern among fast-turnaround phishing infrastructures.

At present, fortnite.beer represents an elevated risk due to its combination of recent registration, partial VirusTotal detections, and Fortnite-brand impersonation—an attractive lure for gamers seeking free V-Bucks, skins, or account recovery pages. Users are advised to avoid all interactions with fortnite.beer and its subpages. Report the domain to your browser’s safe browsing tool, update your password manager to include Fortnite credentials if previously used on this domain, and enable two-factor authentication on all gaming accounts immediately. Monitor linked email addresses and payment methods for signs of credential stuffing or fraudulent transactions. Security teams should consider blacklisting both the domain and the associated IPv4 address at perimeter defenses.