fortsa[.]skin

The domain forsa.skin is identified as a generic_phishing threat and is currently offline. This domain impersonates Epic Games, a well-known gaming company, by using a page title that mimics a legitimate Fortnite Inventory Checker service.

This domain is flagged as generic_phishing by 6 of 95 security vendors on VirusTotal, indicating a low but notable level of suspicion. The domain is registered through Dynadot LLC, a common registrar used by both legitimate and malicious actors. The SSL certificate is issued by Let's Encrypt, which is a trusted certificate authority but does not in itself guarantee the legitimacy of the domain. The domain was created on May 19, 2026, and resolves to the IP address 188.114.96.3. It appears on 1 security blocklist, further highlighting the potential risks associated with this domain.

The current status of forsa.skin is offline, which reduces the immediate threat but does not eliminate the risk entirely. Given the potential for reactivation and the use of a deceptive page title, organizations and individuals are advised to maintain heightened vigilance. Security teams should consider adding this domain to their blocklists and monitoring for any signs of reactivation. Users should avoid clicking on links or entering personal information on any sites that appear similar to forsa.skin until further notice.