fortrewards[.]shop

PhishDestroy first observed fortrewards.shop on Aug 25, 2026. Stored content metadata identifies Epicgames as the apparent target. The captured page title is “503 Service Temporarily Unavailable”. Current evidence score: 45/100 (high).

Positive findings are stored from 2 sources: Cloudflare Radar and URLScan. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Epicgames and assigned phishing as its category on Aug 25, 2026 at 17:08 UTC. Non-positive and contextual checks: VirusTotal recorded 0 detections among 91 engines on Aug 25, 2026 at 15:00 UTC. AlienVault OTX listed 4 community pulse references (not vendor detections) on Aug 25, 2026 at 18:59 UTC. The separate external-blocklist snapshot contained no matches on Aug 25, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Aug 25, 2026 at 18:57 UTC. The 0/91 VirusTotal snapshot and the positive findings above are conflicting observations from different sources or collection times.

The collector marked the hostname reachable on Aug 25, 2026 at 14:52 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 188.114.97.3 (AS13335 Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Oct 18, 2026; checked Aug 25, 2026 at 16:02 UTC.

The content indicators and 2 positive source findings support the current Epicgames impersonation and phishing classification. The target field identifies Epicgames, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.