fortbex[.]com
Análisis de phishing y seguridad de fortbex.com
“Fortnite Inventory Checker | Epic Games”
fortbex.com — Contenido no disponible (HTTP 502). Suplantación de marca: Epicgames; Tipo de estafa: Crypto Drainer. Resumen de las pruebas: VirusTotal 1/91 (Fortinet); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 56/100. Registrador: NiceNIC.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Analysis
PhishDestroy identifies fortbex.com as an active crypto drainer pretending to be the legitimate FortBex exchange. This malicious domain was registered on March 06, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 188.114.96.3. A Let’s Encrypt SSL certificate lends false credibility, while VirusTotal currently shows 1/95 detections, meaning no antivirus engines have flagged it yet. This domain is under active investigation as a generic phishing site designed to harvest wallet credentials and initiate unauthorized crypto transfers. The absence of blocklist coverage and the fresh registration date suggest attackers are leveraging newly created infrastructure to evade detection. Users who interact with fortbex.com risk immediate financial loss as the page likely loads a JavaScript-based crypto drainer targeting MetaMask, Trust Wallet, and similar hot wallets. If you visited fortbex.com, disconnect your wallet immediately, revoke any suspicious token approvals via tools like Revoke.cash, and scan your device with Malwarebytes or Windows Defender. Report the domain to PhishDestroy for inclusion in global blocklists. Never enter wallet seed phrases or private keys on any site—always verify domains via PhishDestroy’s real-time checker to prevent irreversible losses.
Cobertura de los datos12 recorded checks
Inteligencia de seguridad de red Registrar context
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 03:55:03 UTC
Tecnologías · 4 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100 % de confianzaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % de confianzaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % de confianzaAnálisis de VirusTotal
Datos y informes externosIndependent lookups and source reports
PD-20260506-EA5727 Recipient: abuse@nicenic.net Victim safety and official reportingImmediate actions and verified reporting channels
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.