epic-lockercheck[.]shop

Analysis of the domain epic-lockercheck.shop indicates it is under investigation as a potential phishing site. Registered on May 19, 2026, through GNAME.COM PTE. LTD., the domain remains active as of July 15, 2026. Infrastructure analysis reveals it resolves to the IP address 193.187.110.3 and uses nameservers a.dnspod.com, b.dnspod.com, and c.dnspod.com, a configuration commonly observed in low-reputation hosting environments. The domain name suggests a possible focus on account verification or security-themed deception, though the exact content and target brand have not been confirmed through technical analysis. No vendor detections were recorded at the time of assessment, which does not confirm safety but may reflect limited visibility or recent activation. The absence of prior flags does not reduce risk, as phishing domains frequently evade detection during early deployment. Defenders are advised to monitor network traffic to 193.187.110.3 and apply caution when encountering links to epic-lockercheck.shop, particularly in contexts involving account security prompts or authentication requests. Further investigation is required to determine the specific phishing methodology, target audience, and potential brand impersonation. Organizations should consider blocking or sandboxing the domain pending additional intelligence.