showitems[.]lol

This domain is flagged as an elevated-risk credential phishing site specifically targeting Fortnite players. Analysis indicates the infrastructure was designed to harvest Epic Games account credentials by masquerading as a legitimate Fortnite inventory checker tool. The page title 'Fortnite Inventory Checker | Epic Games' directly mimics official branding to deceive victims into entering login details. Infrastructure analysis reveals the domain showitems.lol was registered on May 1, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It currently resolves to IP address 104.21.52.158 and employs Cloudflare services, including HTTP/3 and Cloudflare Browser Insights, alongside Tailwind CSS for frontend styling. The domain appears on one security blocklist and is blocked by PhishDestroy. VirusTotal detection shows 5 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The site has since been taken offline, though residual DNS records may persist. Organizations and users should implement immediate mitigation measures to prevent credential compromise. Network administrators should block the domain and its resolving IP at firewall and DNS levels. Endpoint protection systems should be updated to include this indicator of compromise. Users who may have interacted with the site should reset their Epic Games account passwords immediately and enable multi-factor authentication. Security teams should monitor for authentication attempts from the resolving IP address and review logs for any prior connections to showitems.lol. Given the domain's specific targeting of gaming accounts, additional scrutiny should be applied to any inventory management or account verification tools claiming to be associated with Epic Games.