fortwex[.]com

The domain fortwex.com was registered on October 13, 2025 through Dominet (HK) Limited and is currently listed on a single security blocklist operated by PhishDestroy. DNS resolution points to the IP address 172.67.171.179, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain is hosted on Cloudflare’s network and uses the nameservers ariadne.ns.cloudflare.com and yichun.ns.cloudflare.com. No SSL certificate is presented for the site, indicating that HTTPS is not enforced.

The public page title observed during the brief availability period reads "Fortnite Crew - Exclusive Rewards," directly referencing the Fortnite brand and suggesting a gaming‑related lure. The intelligence classifies the activity as a gaming scam and notes a Gridinsoft trust score of 0 out of 100, reflecting an extremely low reputation. Although VirusTotal has recorded scans from 95 antivirus engines without reporting any detections, the lack of flags does not constitute confirmation of safety, especially given the domain’s inclusion on a phishing blocklist and its brand‑impersonation characteristics.

The site has since been taken offline, limiting immediate threat exposure, but the infrastructure—particularly the use of Cloudflare’s shared IP space and the absence of TLS—remains reusable for future campaigns. Defenders should continue to block fortwex.com at network perimeters, monitor for re‑registration or similar domains that mimic the Fortnite brand, and consider adding the associated IP address to threat‑intel feeds. Ongoing observation of Cloudflare‑hosted IP ranges for similar brand‑targeted page titles is recommended, as is verification of any future DNS or SSL changes that could indicate re‑activation of the malicious infrastructure.