fortbh[.]com

Fortbh.com was observed hosting a page titled “Check the value of your inventory – Fortnite”, which directly references Epic Games’ Fortnite franchise. The domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited and resolves to the Cloudflare address 104.21.84.87, located in the United States under ASN 13335 (Cloudflare, Inc.). No TLS certificate was presented for the site, indicating that HTTPS was not enforced. Reputation services assign low confidence scores: Gridinsoft rates the domain 0 / 100, while Scamadviser reports a trust score of 40 / 100.

The domain appears on a single security blocklist and is explicitly listed as blocked by PhishDestroy. Malware‑analysis aggregators flag the site as malicious: 16 of 93 vendors on VirusTotal reported detections, classifying the activity as a gaming‑related scam that impersonates Epic Games. The page title suggests an attempt to lure Fortnite players into evaluating or trading in‑game inventory, a common vector for credential harvesting or fraudulent transactions. The nameservers “kanye.ns.cloudflare.com” and “sarah.ns.cloudflare.com” are standard Cloudflare services, offering no indication of bespoke command‑and‑control infrastructure.

As of the report date, the domain is taken offline, but the historical evidence indicates a purposeful brand‑impersonation campaign. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP and nameservers, and add the domain to internal phishing‑site blacklists. Incident response teams should advise users, especially the Fortnite community, to avoid any unsolicited links claiming to assess inventory value and to verify URLs against official Epic Games domains. Ongoing surveillance of the IP address and any newly registered domains using the same registrar or naming patterns is recommended to detect potential re‑use of the infrastructure.