fortnoth[.]info

This domain, fortnoth.info, is flagged for brand impersonation targeting Epic Games, a major gaming platform. Analysis indicates the site masqueraded as an official Fortnite-related page, specifically a "Fortnite Wealth Leaderboard," to deceive users into submitting credentials or other sensitive information. No direct evidence of a crypto drainer kit was observed, but the infrastructure aligns with credential theft operations. Infrastructure analysis reveals the domain was registered through Dynadot Inc on March 21, 2026, and resolved to the IP address 188.114.97.3. It was detected by 15 out of 95 security vendors on VirusTotal, indicating widespread recognition as malicious. The domain appears on one security blocklist and was assigned a trust score of 0/100 by Gridinsoft. Technologies detected include Tailwind CSS, Cloudflare, and HTTP/3, suggesting an attempt to mimic legitimate web infrastructure. The domain is currently offline, likely due to takedown efforts or abandonment by the threat actor. However, the registration remains active, posing a residual risk of reactivation. Organizations and users are advised to monitor for renewed activity, block the domain and associated IP at the network level, and verify any Epic Games-related communications through official channels. The use of HTTP/3 and Cloudflare may complicate detection, necessitating updated security controls.