invfort[.]guru

This domain is flagged for elevated-risk phishing activity involving brand impersonation of Fortnite, a popular online video game. The site presents a fraudulent "Inventory Check" page designed to deceive users into entering credentials or other sensitive information under the guise of verifying in-game inventory. Analysis indicates this is a targeted social engineering attack exploiting the game's user base, likely aiming to harvest login details, payment information, or install malware via fake updates or rewards. Infrastructure analysis reveals the domain invfort.guru was registered on May 20, 2026, through Global Domain Group LLC, a registrar frequently associated with malicious registrations. The domain resolves to IP address 188.114.96.3, hosted on CloudFlare infrastructure in Canada, which is commonly used to obscure origin servers. The site's SSL certificate is issued by Let's Encrypt (serial number E8), a legitimate provider often abused by threat actors to lend false credibility. As of the latest scan, 18 out of 95 security vendors on VirusTotal flag the domain as malicious, while one additional blocklist (PhishDestroy) has also listed it. The domain's creation date in the future (2026) suggests either a typo-squatting attempt or an error in registration metadata, further indicating suspicious intent. Mitigation requires immediate blocking of the domain and its associated IP (188.114.96.3) at the network perimeter. Endpoint protection should be updated to detect and prevent access to invfort.guru and related indicators. Users who may have interacted with the site should be instructed to reset their Fortnite account credentials via the official platform, enable multi-factor authentication, and monitor accounts for unauthorized activity. Security teams should review logs for connections to the domain or IP, particularly from systems where gaming activity is common. Given the use of CloudFlare, additional scrutiny is warranted for other domains resolving to the same IP range, as this may indicate a broader campaign.