forthex[.]lol

This domain is flagged as a credential phishing operation specifically targeting Fortnite players through a fabricated Playboi Carti Exclusive Collection promotion. The fraudulent page mimics legitimate in-game events to harvest user account credentials, payment details, or install malware under the guise of exclusive content access. The scheme exploits the popularity of both Fortnite and the associated artist to maximize victim engagement. Analysis indicates multiple high-confidence threat indicators. The domain was registered on April 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, showing an unusually future creation date that suggests potential domain spoofing or incorrect registry data. VirusTotal reports 10 out of 95 security vendors flagging this domain as malicious, while it appears on one security blocklist and is referenced in one AlienVault OTX threat intelligence pulse. Infrastructure analysis reveals the domain resolves to IP address 188.114.97.3 and employs Cloudflare services, which are frequently observed in phishing campaigns to obfuscate origin servers and evade detection. Users who visited forthex.lol should immediately revoke any entered credentials, particularly for gaming accounts and associated payment methods. Monitor linked accounts for unauthorized transactions or activity, and consider enabling multi-factor authentication where available. If financial information was submitted, contact the relevant institution to report potential fraud. Run a full system scan using updated security software to detect any installed malware. Report the domain to relevant security teams or abuse contacts to aid in takedown efforts and prevent further victimization.