fortstats[.]help

This domain, fortstats.help, is identified as a high-risk phishing site specifically designed to harvest Fortnite account credentials. Analysis of the page title, 'Inventory Check | Fortnite,' indicates an attempt to deceive users into believing they are accessing a legitimate game-related service. The domain mimics official Fortnite interfaces to trick victims into entering sensitive login details, which are then captured by threat actors for unauthorized access or financial exploitation. Infrastructure analysis reveals multiple indicators of malicious intent. The domain is flagged by 19 out of 95 security vendors on VirusTotal, demonstrating broad consensus among detection engines. Registered through Global Domain Group LLC on March 01, 2026, the domain resolves to the IP address 85.239.149.81 and appears on three distinct security blocklists. Technologies detected include Tailwind CSS, Nginx, and OpenResty, which are commonly used in both legitimate and malicious web applications. The domain's creation date, set in the future (2026), suggests an attempt to evade temporal-based reputation checks. Users who visited fortstats.help should immediately take corrective actions to mitigate potential compromise. If credentials were entered, change the Fortnite account password and enable multi-factor authentication where available. Monitor the account for unauthorized transactions or activity, and review connected payment methods for signs of fraud. Additionally, scan the device used to access the domain for malware, as phishing sites may deploy additional payloads. Report the incident to the platform's official support channels to assist in broader threat mitigation efforts.