mergefortnite[.]shop

mergefortnite.shop is currently classified as a generic phishing domain with a high risk rating and remains active as of the report date, July 15, 2026. The domain is hosted on DNSPod infrastructure, using the authoritative name servers a.dnspod.com, b.dnspod.com, and c.dnspod.com. DNS resolution points to the IPv4 address 193.187.110.3, confirming a single hosting endpoint. VirusTotal analysis shows that one out of ninety‑one security vendors submitted a detection for this domain, indicating that at least one scanner identified malicious characteristics. No additional contextual information, such as the specific phishing kit or targeted brand, is available from the current intelligence set, so the precise content of the fraudulent page remains unknown. Given the active status, the association with a known phishing classification, and the presence of a detection flag, security teams should treat mergefortnite.shop as hostile. Recommended mitigations include adding the domain and its resolving IP address to block lists, monitoring DNS queries for the associated name servers, and employing heuristic or reputation‑based filters to pre‑empt traffic to this host. Continuous re‑evaluation is advised, as further detections or changes in hosting may alter the threat profile.