fortnitekit[.]com

This domain, fortnitekit.com, is identified as a generic phishing site designed to deceive users by impersonating the official Fortnite platform. Analysis indicates the site presents a fraudulent page titled 'Redeem Your Fortnite Reward Code For an In-Game Item - Fortnite,' luring victims into entering sensitive credentials or payment details under the guise of claiming non-existent in-game rewards. The campaign appears to target Fortnite’s player base, exploiting the popularity of the game to facilitate credential harvesting or financial fraud. Infrastructure analysis reveals the domain was registered on November 07, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 186.2.171.13 and is secured with a Let's Encrypt SSL certificate, a common tactic to appear legitimate. Detection metrics show 11 out of 95 security vendors flagged the domain as malicious on VirusTotal, while it appears on one security blocklist and was referenced in a single threat intelligence pulse on AlienVault OTX. The domain has also been assigned a trust score of 0/100, further confirming its malicious nature. As of the latest assessment, fortnitekit.com has been taken offline, likely in response to security vendor interventions or registrar enforcement actions. However, the elevated risk persists due to the domain’s recent creation and the potential for re-emergence under a different infrastructure. Users who interacted with the site are advised to reset credentials immediately, monitor financial transactions for unauthorized activity, and verify the authenticity of any communications claiming to originate from Fortnite or its affiliates. Organizations should update blocklists to include the domain and associated IP to prevent future access attempts.