fortgraal[.]pro

This domain, fortgraal.pro, is flagged as a credential theft operation targeting Fortnite players through brand impersonation of professional gamer Mongraal. The site presents itself as hosting an "Exclusive Event" under the title "Mongraal x Fortnite - Exclusive Event," a common social engineering tactic to lure victims into entering login credentials or downloading malicious files. Analysis indicates no direct evidence of a crypto drainer kit, but the infrastructure aligns with credential harvesting schemes observed in gaming-related phishing campaigns. The domain does not appear to deploy overt malware, though secondary payload delivery remains a plausible risk given the context of credential theft. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 188.114.97.3 and was registered on April 13, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Detected technologies include Tailwind CSS for frontend styling, Cloudflare for content delivery and DDoS mitigation, Cloudflare Browser Insights for performance monitoring, and HTTP/3 for network protocol support. No Google Safe Browsing (GSB) detections are recorded at this time. As of the latest assessment, fortgraal.pro has been taken offline, reducing immediate exposure risk. However, the domain remains registered and could be reactivated or repurposed for future campaigns. The registrar and hosting infrastructure have not been seized or sinkholed, leaving residual risk for potential reuse. Users who interacted with the site should assume credential exposure and initiate password resets on associated accounts, particularly those linked to gaming platforms. Organizations monitoring phishing infrastructure should track related domains registered through the same registrar and resolving to the identified IP range for proactive mitigation.