checkinventory[.]pro

This domain, checkinventory.pro, operates as a credential phishing site impersonating Epic Games' Fortnite platform. The site presents a fraudulent 'Fortnite Wealth Leaderboard' page designed to harvest login credentials, payment details, or personal information from unsuspecting users. The phishing content mimics legitimate Epic Games branding, leveraging social engineering tactics to exploit users' trust in the gaming platform. Visitors are likely prompted to enter sensitive account information under the guise of accessing exclusive rewards or leaderboard rankings, which are then captured by threat actors for malicious purposes such as account takeover, financial fraud, or identity theft.

Analysis indicates this domain was registered on February 15, 2026, through Web Commerce Communications Limited dba WebNic.cc, a registrar frequently associated with newly created malicious domains. The domain resolves to IP address 172.67.162.173 and is flagged by 14 out of 95 security vendors on VirusTotal, including detection as a generic phishing threat. Additional technical indicators include its presence on one security blocklist and a single threat intelligence pulse in AlienVault OTX. The site employs Cloudflare for hosting and protection, along with technologies such as Tailwind CSS, Facebook Pixel, and Cloudflare Browser Insights, which may be used to enhance the phishing page's appearance and track victim interactions. A Gridinsoft trust score of 0/100 further corroborates its malicious nature.

If a user has visited checkinventory.pro or entered any credentials on the site, immediate action is required to mitigate potential damage. First, change the password for the affected Fortnite or Epic Games account, as well as any other accounts using the same or similar credentials. Enable multi-factor authentication (MFA) if not already active. Monitor the account for unauthorized transactions, in-game purchases, or suspicious activity. Users should also scan their devices for malware using updated security tools, as phishing sites may distribute additional payloads. Report the incident to Epic Games' official support channels and consider notifying relevant financial institutions if payment details were entered. Finally, remain vigilant for follow-up phishing attempts via email, SMS, or social media, as compromised credentials may be used in further targeted attacks.