fortnitex[.]org

This domain, fortnitex.org, is confirmed as a brand impersonation resource targeting Epic Games, the publisher of Fortnite. Analysis indicates the site presented itself as a "Fortnite Inventory Checker" under the Epic Games brand, a common tactic to deceive users into divulging account credentials or installing malicious software. No crypto drainer kit signatures were detected, but the page structure and branding elements closely mirrored legitimate Epic Games properties, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on March 26, 2026, and resolved to the IP address 172.67.128.167. Detection metrics show 17 out of 95 security vendors flagged the domain as malicious on VirusTotal, while it appeared on one security blocklist. The domain utilized Cloudflare for hosting and protection, with additional technologies including Tailwind CSS and HTTP/3 detected. Google Safe Browsing did not list the domain at the time of analysis, though the Gridinsoft trust score assigned a value of 0/100, indicating high risk. The domain has since been taken offline, likely following reports to the registrar or hosting provider. However, the elevated risk level persists due to the domain’s recent creation date and the use of Cloudflare, which may obscure further infrastructure details. Users who interacted with the site are advised to reset credentials for any associated accounts, enable multi-factor authentication, and monitor for unauthorized activity. Organizations should update blocklists to include the domain and IP address to prevent future access attempts.