fortnitelocker[.]shop

This domain, fortnitelocker.shop, is identified as a phishing site designed to impersonate the official Fortnite platform, specifically targeting users with a fraudulent inventory check page. The site aims to deceive victims into entering login credentials or other sensitive information by mimicking legitimate Fortnite services. Analysis of the page title, 'Inventory Check | Fortnite,' confirms the domain’s intent to exploit users seeking in-game inventory management or rewards, a common tactic in gaming-related phishing schemes. Infrastructure analysis reveals multiple indicators of malicious activity. The domain was registered on April 13, 2026, through Hosting Ukraine LLC, an uncommon registrar for gaming-related services. It resolves to the IP address 188.114.97.3, hosted on Cloudflare’s network (AS13335), which is frequently leveraged to obscure the true origin of phishing infrastructure. Security vendors have flagged the domain in 18 out of 95 engines on VirusTotal, and it appears on at least one security blocklist. The SSL certificate, issued by Let’s Encrypt (YE2), provides a false sense of security while failing to validate the site’s legitimacy. Users who visited fortnitelocker.shop should take immediate action to mitigate potential risks. If credentials or personal information were entered, affected accounts must be secured by changing passwords and enabling multi-factor authentication where available. Devices used to access the site should undergo a full malware scan to detect any secondary payloads or persistent threats. Additionally, monitoring for unauthorized transactions or account activity is recommended, as stolen credentials may be exploited across other platforms. Given the domain’s elevated risk level and offline status, users should remain vigilant for similar phishing attempts targeting gaming communities.