fortclub[.]life

This domain, fortclub.life, operates as a credential theft phishing site targeting users of the popular online game Fortnite. The page impersonates an official 'Inventory Check' portal, presenting a fraudulent interface designed to harvest user account credentials, including usernames, passwords, and potentially linked payment information. The site employs social engineering tactics, leveraging the Fortnite brand to exploit user trust and urgency, particularly targeting players seeking in-game rewards or account verification prompts. Analysis indicates the domain is engineered to mimic legitimate Epic Games portals, increasing the likelihood of successful credential compromise for unsuspecting victims. Infrastructure analysis reveals multiple high-risk indicators. The domain resolves to IP address 85.239.149.81, hosted on AS207043 (DEDIK SERVICES LIMITED) in Germany. It was registered on April 30, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, with a suspiciously future creation date suggesting potential domain spoofing or typosquatting techniques. VirusTotal detection rates show 17 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (R12), providing a veneer of legitimacy while failing to mitigate the underlying threat. The page title, 'Inventory Check | Fortnite,' directly aligns with common in-game prompts, further corroborating its intent to deceive users. Users who have interacted with fortclub.life should immediately take corrective actions to mitigate potential account compromise. First, change Fortnite account passwords using the official Epic Games website, ensuring the new password is unique and complex. Enable multi-factor authentication (MFA) if not already active, as this significantly reduces the risk of unauthorized access. Monitor the account for unauthorized purchases, inventory changes, or linked payment method modifications. If financial information was entered, contact the associated payment provider to report potential fraud and request transaction monitoring. Users should also scan their devices for malware, as credential theft sites may deploy additional payloads. Finally, report the domain to the official Fortnite/Epic Games support channels to aid in broader takedown efforts and protect other potential victims.