fortninja[.]top

PhishDestroy has identified fortninja.top as a malicious domain engaged in generic phishing, specifically targeting Fortnite players through a fake inventory checker page. The domain is currently offline, but its infrastructure and indicators provide critical insight into the threat landscape. The site masqueraded as a legitimate Fortnite inventory checker, likely aiming to steal user credentials or other sensitive information from unsuspecting gamers.

Technical analysis reveals that fortninja.top was flagged by 18 out of 95 security vendors on VirusTotal, indicating a high degree of consensus among security solutions regarding its malicious nature. The domain was registered through NameSilo, LLC, and resolves to the IP address 188.114.96.3. It was created on April 3, 2026, and featured an SSL certificate issued by Let's Encrypt (E7), which added a veneer of legitimacy. The domain appeared on one security blocklist, underscoring its limited but notable presence in threat intelligence feeds. The page title, "FORTNITE INVENTORY CHECKER," was designed to lure victims into interacting with the site.

Although the domain has been taken offline, users should remain vigilant. PhishDestroy recommends that anyone who may have visited fortninja.top or entered credentials on the site immediately change their Fortnite account passwords and enable two-factor authentication. If any financial information was submitted, affected users should contact their bank and monitor accounts for suspicious activity. The quick takedown of this domain demonstrates the importance of collaborative threat reporting, but similar phishing attempts are likely to emerge given the popularity of the Fortnite brand. Users should only access official Fortnite websites and avoid unsolicited links promising account checks or giveaways.