fortnitebucks[.]xyz

PhishDestroy identifies fortnitebucks.xyz as an active free Fortnite credits phishing scam targeting gaming enthusiasts. The domain mimics legitimate Fortnite reward sites to deceive users into revealing personal or payment information. The threat level is currently marked as under_investigation but exhibits multiple red flags consistent with credential harvesting and fraudulent transactions. The risk remains high due to the site's deceptive branding and potential for widespread exploitation in gaming communities.

This domain was flagged with 10 out of 95 detections on VirusTotal, indicating no immediate blacklisting despite suspicious activity. The domain fortnitebucks.xyz was registered on April 03, 2026, through Global Domain Group LLC, a registrar associated with high-risk domain registrations. It resolves to IP address 188.114.97.3, a hosting infrastructure linked to multiple low-trust and abusive domains. The site utilizes a Let's Encrypt SSL certificate, a common tactic to appear legitimate. Despite these technical indicators, the domain has yet to be added to most public blocklists, leaving users vulnerable to exposure.

Mitigation for this specific phishing threat involves immediate domain blocking and avoidance of any interactions with fortnitebucks.xyz. Users should verify gaming reward websites through official sources and avoid clicking on untrusted links promising free Fortnite credits. Gaming platforms and security vendors are urged to monitor this domain for escalation in malicious activity. If exposure occurs, users should run full system scans with reputable antivirus software and change passwords if credentials were entered. Report the domain to gaming platforms and cybersecurity forums to aid in takedown efforts.