checkfort[.]xyz

This domain, checkfort.xyz, poses a brand impersonation threat targeting users of Epic Games' Fortnite platform. The site presents itself as a legitimate "Fortnite Inventory Checker" under the Epic Games brand, attempting to deceive visitors into entering account credentials or downloading malicious files. Such impersonation schemes are commonly used to harvest login details, install malware, or facilitate unauthorized transactions within gaming ecosystems. The risk is elevated due to the domain's targeted nature and the high-value user data associated with gaming accounts. Analysis indicates checkfort.xyz was registered on April 14, 2026, through Global Domain Group LLC, a registrar frequently associated with suspicious domains. The domain is flagged by 15 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears in one AlienVault OTX threat intelligence pulse and is listed on one security blocklist, specifically PhishDestroy. Infrastructure analysis reveals the domain resolves to IP address 104.21.50.208 and utilizes technologies such as Tailwind CSS, Cloudflare Browser Insights, Cloudflare, and HTTP/3, which may be employed to obfuscate malicious activity or enhance the site's perceived legitimacy. Users who visited checkfort.xyz should take immediate action to mitigate potential risks. First, change passwords for Epic Games and any other accounts where the same credentials may have been reused. Enable multi-factor authentication where available. Scan the device used to access the site with updated security software to detect and remove any malware. Monitor financial transactions and gaming accounts for unauthorized activity. If personal or payment information was entered, consider placing a fraud alert on credit files. Report the incident to the legitimate platform (Epic Games) and relevant cybersecurity authorities to aid in tracking and mitigating the threat.