wsxvalue[.]com

This domain, wsxvalue.com, is a credential theft operation designed to impersonate Epic Games' Fortnite platform. Analysis indicates the site presents itself as a "Fortnite Inventory Checker," a tactic commonly used to deceive users into entering their login credentials. The goal is to harvest account details, which can then be exploited for unauthorized access, in-game fraud, or resale on underground markets. Credential theft remains a high-impact threat due to the value of gaming accounts, particularly those linked to payment methods or rare in-game items.

Infrastructure analysis reveals multiple red flags. The domain was registered on April 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with malicious activity. It resolves to IP address 104.21.92.89 and is flagged by 17 out of 95 security vendors on VirusTotal, including detections for phishing and fraudulent content. Additionally, the domain appears on two security blocklists and is referenced in one AlienVault OTX threat intelligence pulse. The SSL certificate, issued by Let's Encrypt, provides basic encryption but does not validate the legitimacy of the site, as free certificates are commonly abused by threat actors.

Users who visited wsxvalue.com or entered credentials on the site should take immediate action. First, reset the password for their Epic Games account and any other platforms where the same credentials were reused. Enable multi-factor authentication (MFA) to mitigate unauthorized access. Monitor the account for suspicious activity, such as unauthorized purchases or logins from unfamiliar locations. If payment details were entered, contact the financial institution to review recent transactions and consider placing a fraud alert. Finally, scan the device used to access the site for malware, as credential theft sites may deploy additional payloads.