fortnite-inv[.]pro

This domain is flagged as an elevated-risk credential phishing site specifically targeting Fortnite users through a fake inventory checker interface. Analysis indicates the site was designed to harvest login credentials by impersonating an official Epic Games service, a common tactic in account takeover campaigns within gaming communities. Infrastructure analysis reveals the domain fortnite-inv.pro was registered on February 19, 2026, through Global Domain Group LLC. It resolves to IP address 188.114.97.3 and employs Cloudflare services, including HTTP/3 and Browser Insights, likely to obscure origin infrastructure and evade detection. Detection data shows 13 of 95 security vendors on VirusTotal flag the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and was previously blocked by PhishDestroy before being taken offline. Mitigation for this threat type requires immediate action from network defenders and end users. Organizations should implement DNS-based blocking for the domain and its resolving IP address across all security gateways. Endpoint protection systems should be updated to detect and prevent access to the domain, while network monitoring tools should alert on any residual connections. Users who may have interacted with the site should be instructed to reset their Epic Games account credentials via the official platform and enable multi-factor authentication. Security teams should review logs for any successful connections to the domain or IP address to identify potentially compromised accounts.