checkinv[.]lol

This domain is flagged for elevated-risk brand impersonation targeting Epic Games, specifically leveraging a fraudulent Fortnite Wealth Leaderboard page to deceive users. The infrastructure is designed to mimic legitimate gaming reward portals, increasing the likelihood of credential harvesting or account compromise through social engineering tactics. Analysis indicates the domain checkinv.lol was registered on April 05, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 104.21.59.196 and is currently offline. The domain appears on one security blocklist and is detected by 6 out of 95 security vendors on VirusTotal. AlienVault OTX lists it in one threat intelligence pulse. Additional technical indicators include a Gridinsoft trust score of 0/100 and the use of Tailwind CSS, Cloudflare Browser Insights, Cloudflare, and HTTP/3 technologies. The page title, 'Fortnite Wealth Leaderboard | Epic Games,' directly impersonates Epic Games branding. Mitigation steps for this threat type include blocking the domain and its associated IP address at the network level. Organizations should update endpoint protection rules to flag or quarantine communications linked to this infrastructure. Security teams are advised to monitor for credential submission attempts targeting Epic Games accounts and educate users about recognizing brand impersonation tactics, particularly those involving fake reward or leaderboard schemes. If the domain reactivates, incident responders should prioritize forensic analysis of its hosting environment and associated artifacts.