fortmet[.]top

The domain fortmet.top is flagged for high-risk credential theft phishing, impersonating the Fortnite brand. Analysis indicates that this domain is designed to trick users into revealing their login credentials for Fortnite or Epic Games accounts.

Exact technical indicators reveal that fortmet.top has a VirusTotal score of 11/95, suggesting that a significant number of security vendors have identified it as malicious. The domain is registered through Global Domain Group LLC and resolves to the IP address 172.67.162.120, which is located in the United States and is part of AS13335 Cloudflare, Inc. The domain was created on March 29, 2026, and is currently listed on one security blocklist. Additionally, the domain is blocked by PhishDestroy, a reputable security service. Notably, the site does not have an SSL certificate, which is a red flag for users as it indicates a lack of encrypted communication.

As of the assessment, fortmet.top remains active and poses a high risk to users. Security response actions should include blocking the domain at network and endpoint levels, educating users about the risks of credential theft, and monitoring for any unauthorized access or activity related to Fortnite or Epic Games accounts. The lack of SSL and the presence on a security blocklist further underscore the need for immediate action to mitigate the remaining risk.