forthb[.]live

This domain, forthb.live, is actively engaged in a credential phishing campaign targeting users of the popular online game Fortnite. The phishing page impersonates an official "Inventory Check" interface, designed to deceive victims into entering account credentials, payment details, or other sensitive information under the pretense of verifying in-game inventory. Such campaigns typically aim to harvest login credentials for resale, account takeover, or unauthorized in-game purchases, posing significant financial and privacy risks to affected users.

Infrastructure analysis reveals multiple indicators of malicious intent. The domain was registered on May 05, 2026, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and employs a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the legitimacy of the site. As of the latest assessment, forthb.live is flagged by 8 out of 95 security vendors on VirusTotal, with detections including generic phishing and fraudulent activity classifications. The domain remains active, with no evidence of takedown or mitigation at the time of analysis.

Users who have visited forthb.live or entered credentials on the site should take immediate remedial action. Affected individuals are advised to change their Fortnite account passwords via the official platform and enable multi-factor authentication if not already active. Any payment details linked to the account should be reviewed for unauthorized transactions, and users should monitor their accounts for signs of compromise. Additionally, affected systems should be scanned for malware, as phishing sites may deploy additional payloads. Reporting the domain to relevant security teams or abuse contacts may aid in its disruption.