fortnitex[.]us

Analysis indicates that fortnitex.us is actively being used for generic phishing. The domain was registered on February 04, 2026 through Dynadot Inc and currently resolves to the IPv4 address 85.239.149.81. DNS resolution is handled by three DNSPod nameservers (a.dnspod.com, b.dnspod.com, c.dnspod.com). VirusTotal reports that six of ninety‑five security vendors have flagged the domain as malicious, demonstrating a measurable level of detection across independent scanning engines. The domain appears on one public security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing vector. Its operational status is listed as active, and the risk rating assigned by the source is high. No public information on SSL/TLS configuration, HTTP response codes, page title, or additional threat‑intel feeds such as OTX is available, leaving those aspects unverified. Defenders should treat the domain as hostile: network firewalls and web proxies ought to deny traffic to fortnitex.us, DNS security solutions should block its resolution, and endpoint detection rules should incorporate the observed VirusTotal detections. Continuous monitoring of the IP 85.239.149.81 for anomalous connections is advised, and any internal references to the domain should be eradicated to mitigate potential credential harvesting.