chkfortnite[.]cfd

This domain is flagged as a high-risk phishing site specifically targeting Fortnite players by impersonating an official Epic Games inventory checker. The threat involves credential harvesting, likely through a fraudulent login portal designed to mimic legitimate Epic Games authentication flows. Analysis indicates the domain is actively collecting user credentials, which may be exploited for account takeovers, in-game item theft, or broader identity fraud targeting the gaming community. Infrastructure analysis reveals the domain chkfortnite.cfd was registered on March 31, 2026, through Global Domain Group LLC, an uncommon registrar for legitimate gaming services. It resolves to IP address 104.21.41.11, hosted on Cloudflare's network (AS13335), a common tactic to obscure origin servers and evade detection. The SSL certificate is issued by Let's Encrypt (serial YE2), providing HTTPS encryption to lend false legitimacy. VirusTotal detection shows 18 out of 95 security vendors flag the domain as malicious, while it appears on one security blocklist and is currently blocked by PhishDestroy. The page title, 'Fortnite Inventory Checker | Epic Games,' directly mimics official branding to deceive users. Mitigation requires immediate blocking of the domain and its resolving IP (104.21.41.11) at network perimeter controls. Organizations should deploy indicators of compromise (IOCs) including the domain, IP, and SSL certificate serial (YE2) into endpoint detection and response systems. Users should be educated to verify domain authenticity before entering credentials, particularly for gaming-related services. Account holders are advised to enable multi-factor authentication on Epic Games accounts and monitor for unauthorized access. Incident responders should treat any interaction with this domain as a potential credential compromise and initiate password resets for affected accounts.