fortnitelist[.]icu

This domain, fortnitelist.icu, is identified as a phishing infrastructure designed to harvest user credentials by mimicking legitimate gaming login portals. Analysis indicates the site presents a fake authentication interface, likely targeting players of a popular online game to capture usernames, passwords, and potentially two-factor authentication codes. The domain employs deceptive branding and a loading screen to simulate a legitimate service, increasing the likelihood of successful credential theft from unsuspecting victims. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was registered on April 9, 2026, through HOSTINGER operations, UAB, and currently resolves to the IP address 91.227.114.14. Security vendors on VirusTotal flagged the domain, with 16 out of 95 engines detecting it as malicious. Additionally, the domain appears on one security blocklist, and its Gridinsoft trust score is 0 out of 100, further confirming its high-risk nature. The use of HTTP/3 suggests an attempt to leverage modern web protocols to evade detection and improve performance, which is atypical for legitimate credential portals. Users who visited fortnitelist.icu or entered credentials on the site should take immediate action to mitigate potential compromise. First, reset passwords for any accounts accessed or entered on the site, prioritizing gaming, email, and financial services. Enable multi-factor authentication where available to add an additional layer of security. Monitor accounts for unauthorized activity, such as logins from unfamiliar locations or devices, and report any suspicious transactions. If payment details were entered, contact the associated financial institution to flag the account for potential fraud. Finally, scan the device used to access the site for malware, as phishing pages may deliver secondary payloads or exploit browser vulnerabilities.