fortle[.]cc

This domain, fortle.cc, is flagged as an active credential phishing site targeting users of the popular online game Fortnite. The site impersonates Epic Games' official infrastructure, presenting a fraudulent "Inventory Check | Fortnite" page designed to harvest login credentials, payment details, or other sensitive user data. While no specific drainer kit has been conclusively identified, the use of modern web technologies and Cloudflare suggests an attempt to evade detection and enhance the site's perceived legitimacy. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain was registered on May 20, 2026, through Global Domain Group LLC, an uncommon registrar for legitimate gaming services. It resolves to the IP address 172.67.151.68, which is hosted behind Cloudflare's network, a common tactic to obscure the true origin of phishing infrastructure. As of the latest scan, 19 out of 95 security vendors on VirusTotal detect the domain as malicious. The domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and CERT-PL, and has not been flagged by Google Safe Browsing at this time. Additional technologies detected include Tailwind CSS for styling and Cloudflare Browser Insights for performance monitoring, further indicating an attempt to mimic a professional web presence. The site remains active and poses a high risk to users unfamiliar with phishing tactics, particularly younger audiences targeted by gaming-related scams. No takedown actions have been observed as of this report, and the domain's trust score of 46/100 reflects its confirmed malicious status. Users are advised to avoid interacting with the domain and to verify the authenticity of any Fortnite-related login pages through official Epic Games channels. Organizations should update blocklists to include fortle.cc and monitor for related infrastructure, as the use of Cloudflare may indicate additional domains or IPs linked to the same threat actor.