fortprx[.]top

The domain fortprx.top has been identified in a credential theft scheme, impersonating a well-known gaming brand with the page titled "Inventory Check | Fortnite." The investigation suggests that the domain is designed to manipulate users into providing sensitive information under the guise of a game-related activity. There is no specific evidence of a crypto drainer kit involved; however, the domain's construction and theme strongly imply an intent to deceive for credential theft.

Technical indicators reveal the domain is currently active with a VirusTotal score of 13/95, signifying a significant detection across multiple security vendors. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 172.67.175.121. It uses a Let's Encrypt SSL certificate, which, while legitimate, is often exploited for nefarious purposes due to its ease of access. The domain was created on May 04, 2026, and as it stands, it's not identified by Google's Safe Browsing as malicious, though it's likely to appear on various blocklists soon.

Given its active status, fortprx.top poses a high risk, especially to individuals familiar with the Fortnite brand. Users are advised to exercise caution and avoid entering any personal details on the site. Security teams should consider blocking this domain at the network level to mitigate risk, and ongoing monitoring is recommended to capture any further developments or changes in its malicious activity. Immediate response actions should include alerting affected platforms to facilitate the removal and protection against further spread.