getvalued.live
“Fortnite Inventory Checker | Epic Games”
Evidence Summary
This domain, getvalued.live, is identified as a credential phishing site specifically designed to impersonate Epic Games’ Fortnite platform. Analysis indicates the domain presents a fraudulent Fortnite Inventory Checker interface, aiming to deceive users into submitting account credentials. The threat type is classified as a targeted phishing attack against gaming accounts, with potential secondary risks including malware distribution or financial fraud via compromised accounts. Infrastructure analysis reveals the domain was registered on April 18, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3, which has been linked to other malicious activities. Security vendor assessments show 21 of 95 engines on VirusTotal flag the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is referenced in one AlienVault OTX threat intelligence pulse. Additional indicators include its prior blocking by PhishDestroy and a page title explicitly mimicking Epic Games’ branding. As of the latest assessment, getvalued.live has been taken offline, though residual risks may persist if users previously interacted with the site. Organizations and individuals are advised to monitor for unauthorized access attempts on gaming accounts, particularly those linked to Fortnite. Network-level blocking of the domain and its associated IP (188.114.96.3) is recommended as a preventive measure. Users should be educated on recognizing phishing attempts, especially those leveraging popular gaming platforms, and encouraged to enable multi-factor authentication on all sensitive accounts.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| CIRA Canadian Shield DNS | getvalued.live |
malicious | Sinkholed |
Forensic History & Detection Timeline
-
VirusTotal Detections Update Jun 25, 2026 · 20:20 UTCVirusTotal scanner detections updated from 14 to 21. Added scanner alerts: BitDefender, Chong Lua Dao, Cluster25, CyRadar, ESET, LevelBlue, Lionic, MalwareURL, SOCRadar, VIPRE. Resolved alerts: OpenPhish.
Threat Response Pipeline
Public Blocklist Status
Stored Capture · 3 sources
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Community reports
Reported by 1 community member, first seen Jun 17, 2026
- Stored reports
- 1
- Unique reported URLs
- 1
Evidence & External Reports
PD-20260617-5556DE Recipient: abuse@publicdomainregistry.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive