gofortnite[.]live

This domain, gofortnite.live, is flagged as a generic phishing site targeting users of Epic Games' Fortnite platform. Analysis indicates the domain was designed to mimic an official Fortnite inventory checker, likely to harvest login credentials or other sensitive account information. The page title, 'Fortnite Inventory Checker | Epic Games,' directly impersonates the legitimate Epic Games brand, increasing the likelihood of user deception. No specific drainer kit signatures were identified in the available data, but the domain aligns with common credential phishing tactics observed in gaming-related fraud campaigns. Infrastructure analysis reveals the following technical indicators: the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 04, 2026, and resolves to the IP address 172.67.128.37. VirusTotal detection shows 3 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and was actively blocked by at least one threat intelligence feed. No evidence of inclusion in Google Safe Browsing (GSB) was found in the available data, though this may reflect detection latency rather than absence of risk. The domain is currently offline, reducing immediate exposure to end users. However, the infrastructure remains registered and could be reactivated or repurposed for future phishing campaigns. Organizations and individuals should treat any prior interaction with this domain as a potential credential compromise event. Users who entered login details on gofortnite.live should immediately reset their Epic Games passwords and enable multi-factor authentication (MFA) on their accounts. Network-level blocking of the domain and its associated IP (172.67.128.37) is recommended as a precautionary measure. Monitoring for similar domains registered through the same registrar or resolving to the same IP range may help identify related threats.