fortcheck[.]click

This domain, fortcheck.click, operates as a credential theft phishing site specifically targeting users of the Fortnite gaming platform. The page impersonates an official Epic Games inventory checker tool, using the title 'Fortnite Inventory Checker | Epic Games' to deceive victims into entering account credentials. Analysis indicates the site is designed to harvest login details, which could lead to account takeovers, unauthorized in-game purchases, or further exploitation of linked payment methods. Infrastructure analysis reveals the domain was registered through Global Domain Group LLC and resolves to the IP address 172.67.153.199. Security vendors on VirusTotal flagged the domain at a rate of 21/95, indicating moderate to high confidence in its malicious nature. The domain appears on one security blocklist and uses an SSL certificate issued by Google Trust Services (WE1), which may lend a false sense of legitimacy to unsuspecting users. The site is currently offline, but its prior activity and registration details suggest a deliberate attempt to exploit Fortnite's user base. Users who visited fortcheck.click should immediately change their Epic Games account password and enable multi-factor authentication if not already active. Any credentials entered on the site should be considered compromised, and users should monitor their accounts for unauthorized transactions or activity. Additionally, devices used to access the site should be scanned for malware, as phishing pages may deploy secondary payloads. If financial information was linked to the account, users should contact their payment provider to review recent transactions and prevent further unauthorized access.