fortnitestats[.]locker

Analysis of fortnitestats.locker shows a newly registered domain (creation date July 05, 2026) hosted on the DNS provider dnspod.com (nameservers a.dnspod.com, b.dnspod.com, c.dnspod.com) and resolved to the IPv4 address 158.94.211.169. The domain was registered through Gname.com Pte. Ltd., a registrar that frequently appears in malicious infrastructure. VirusTotal reports that 2 of 91 security vendors have flagged the domain, indicating limited but present detection by some scanners. The threat classification is generic_phishing with a high risk rating and the domain remains active as of the report date (July 15, 2026). Concrete evidence confirms the domain’s existence, its resolution to the noted IP, and partial detection by security services; however, the specific content served, the phishing kit used, and the targeted brand are not disclosed in the current intelligence. Defenders should prioritize blocking DNS resolution to fortnitestats.locker and the associated IP address, incorporate the domain and IP into outbound filtering rules, and monitor for any related traffic patterns. Continuous re‑evaluation of the domain on threat intelligence platforms is advised to capture any escalation in detection counts or observed malicious activity.