fortnitechecker[.]com

PhishDestroy identifies fortnitechecker.com as a live Fortnite account checker phishing site currently under investigation for harvesting user credentials. This domain was flagged with 1/95 VirusTotal detections, registered through CommuniGal Communication Ltd on May 31, 2022, and resolves to IP 77.247.179.87 using a Let’s Encrypt SSL certificate.

The specific threat posed by fortnitechecker.com is credential theft via a counterfeit Fortnite account validator page. Attackers trick players into entering their Epic Games login details under the guise of checking account status, then silently exfiltrate usernames and passwords. Once harvested, credentials are likely used to hijack accounts, sell rare skins on black markets, or leverage in-game assets for ransom. The domain’s recent creation date combined with zero antivirus detections suggests this campaign is still in early deployment, increasing the risk of undetected compromise.

Technical indicators reinforce the risk: the domain resolves to a single IP address (77.247.179.87) operated by CommuniGal Communication Ltd, a registrar known for hosting multiple gaming-themed scams. The Let’s Encrypt certificate provides a false sense of legitimacy, while zero VirusTotal detections (1/95 engines) indicate a low initial detection rate, allowing the site to remain active longer. Given the domain’s age (created May 31, 2022) and lack of blocklist presence, users who have visited this site should immediately change their Epic Games password, enable two-factor authentication, and scan devices for malware using updated security tools.