fortvalue[.]cc

Analysis of fortvalue.cc indicates active malicious use consistent with a generic phishing campaign. The domain was registered through Namecheap Inc on July 14, 2026 and is currently hosted behind Cloudflare, resolving to IP address 188.114.96.3 located in Canada under Cloudflare, Inc. DNS resolution uses the Cloudflare nameservers pete.ns.cloudflare.com and zariyah.ns.cloudflare.com. The site presents the page title "Inventory Check | Fortnite," suggesting an attempt to lure victims by referencing a popular gaming brand, though the page content has not been publicly examined. Security telemetry shows the domain appears on one external blocklist and is blocked by the PhishDestroy service, confirming that at least one defensive feed has identified it as malicious.

VirusTotal scans report 17 detections out of 91 security vendors, providing further evidence of suspicious behavior. AlienVault OTX lists the domain in a single threat intelligence pulse, reinforcing its inclusion in shared threat feeds. The SSL certificate is issued by Google Trust Services under the WE1 identifier, indicating a valid TLS certificate but offering no guarantee of legitimacy. Detected web technologies include Tailwind CSS, Google Analytics, Facebook Pixel, Cloudflare Browser Insights, and support for HTTP/3, all typical of legitimate sites and therefore not indicative of malicious intent on their own.

Current uncertainties include the exact phishing vector employed, the credential collection mechanism, and whether the site hosts additional malicious payloads. Defenders should continue to block fortvalue.cc at network and DNS layers, monitor for outbound connections to the associated IP, and update detection signatures to reflect the observed certificate and vendor detection patterns. Ongoing observation of traffic to the domain and correlation with user reports will help refine response actions as more details emerge.