# PhishDestroy domain threat record: store-epicgames.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/store-epicgames.com/
Machine-readable companion: https://phishdestroy.io/domain/store-epicgames.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: not observed active
- First observed by PhishDestroy: 2026-10-06 21:12:22 UTC
- Last availability or vendor check: 2026-10-21 22:32:53 UTC
- Stored record updated: 2026-10-22 14:24:27 UTC
- VirusTotal detections in the stored snapshot: 7/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Epic Games

## Stored infrastructure

- Observed IP address: 46.29.26.38
- Registrar in stored WHOIS data: GMO Internet Group, Inc. d/b/a Onamae.com
- Registration date (registry RDAP, store-epicgames.com): 2026-09-10 14:44:20 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a11324-0c41-71ee-859a-281c363e2022/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/store-epicgames.com
- Certificate Transparency search: https://crt.sh/?q=%25.store-epicgames.com
- Web Archive lookup: https://web.archive.org/web/*/https://store-epicgames.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
store-epicgames.com is an impersonation phishing page built to pass as an official Epic Games storefront. It targets gamers who expect to buy titles, claim free games or manage their account on Epic's store. PhishDestroy first flagged it on 2026-10-06. The site has been offline since 2026-10-14 and was still dead when checked on 2026-10-19.

How the scam works
The domain puts the word "store" in front of the Epic Games name so it reads like the real shop in a link, an ad or a search result. Sites of this type typically show a familiar-looking sign-in or checkout screen and capture whatever the visitor enters, such as an Epic Games login, a one-time code or payment card details. A stolen Epic account is valuable because attackers can resell it, spend its stored balance and linked payment methods, or strip its game library and in-game items. The page displayed only the generic title "Loading" rather than Epic branding, but we classified the site by the brand it impersonates.

Evidence
Seven of 92 VirusTotal engines flagged the domain as of 2026-10-10: alphaMountain.ai, Bfore.Ai PreCrime, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft and SOCRadar. That count is modest, but these vendors work independently of one another. Spamhaus lists the domain in its DBL under the phishing category, and three AlienVault OTX threat pulses reference it, alongside the PhishDestroy blocklist.

Infrastructure
The domain was registered on 2026-09-10 through GMO Internet Group (Onamae.com), 26 days before PhishDestroy detected it. That short gap between registration and active abuse is typical of throwaway phishing domains. It resolved to 46.29.26.38, a server in Finland announced by the MSROBITRADERS-AS-AP network (M/S Robi Traders, BD).

What to do
If you signed in on this site, change your Epic Games password right away, along with the password on any other account that uses the same one. Turn on two-factor authentication through the official Epic account settings, sign out all active sessions, and check for changes to your email, linked platforms or purchase history. If you entered card details, contact your bank to block the card and dispute any unfamiliar charges. Defenders should block the domain and its hosting IP and search mail and proxy logs for users who visited it.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a11324-0c41-71ee-859a-281c363e2022/
VirusTotal report: https://www.virustotal.com/gui/domain/store-epicgames.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=store-epicgames.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-19 10:14:34 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/kgYbqqKT/0e23f5bc3d18.png
  Captured: 2026-10-06 21:36:11 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a11324-0c41-71ee-859a-281c363e2022.png
  Captured: 2026-10-06 21:36:11 UTC
  Source report: https://urlscan.io/result/01a11324-0c41-71ee-859a-281c363e2022/
- URLScan capture 2: https://urlscan.io/screenshots/01a0901a-0f7c-75ae-875e-78a786d5996f.png
  Captured: 2026-10-06 21:12:22 UTC
  Source report: https://urlscan.io/result/01a11324-0c41-71ee-859a-281c363e2022/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/545bc761-af23-4eca-b60b-d88dc6293ed8.png
  Captured: 2026-10-06 21:18:26 UTC
  Source report: https://radar.cloudflare.com/scan/545bc761-af23-4eca-b60b-d88dc6293ed8
  SHA-256: 103cd75d7e67d9e9c6e9bb8028670745bd51cb9869f77c190b7e0d813aebca77
- URLQuery: https://screenshots.phishdestroy.io/uq/39af5510-fcb2-4a11-b2a6-a7fce10281ce.png
  Source report: https://urlquery.net/report/39af5510-fcb2-4a11-b2a6-a7fce10281ce
  SHA-256: ebe21d2b1a766c968cb095d4fa934e8f6d2138b699bb20e13cb03a50d886c2b7
- URLScan · 2026-09-10: https://screenshots.phishdestroy.io/us/01a08c42-1cbf-73af-b715-03f7adac5412.png
  Captured: 2026-09-10 16:59:05 UTC
  Source report: https://urlscan.io/result/01a08c42-1cbf-73af-b715-03f7adac5412/
  SHA-256: 97c640af9215d3b6ffa28b18a861bc090747e70fc5a0691636893b127dda4b77
- URLScan · 2026-09-11: https://screenshots.phishdestroy.io/us/01a0901a-0f7c-75ae-875e-78a786d5996f.png
  Captured: 2026-09-11 10:53:49 UTC
  Source report: https://urlscan.io/result/01a0901a-0f7c-75ae-875e-78a786d5996f/
  SHA-256: e3bde0ec7ea7ef798657aa199fd96382c7547a70ed1d0575ffbdba751e52025e
- URLScan · 2026-10-06: https://screenshots.phishdestroy.io/us/01a11325-5577-7470-9eaa-bfef26a2ff30.png
  Captured: 2026-10-06 21:36:23 UTC
  Source report: https://urlscan.io/result/01a11325-5577-7470-9eaa-bfef26a2ff30/
  SHA-256: ef84b7ebe4f622d3a80eaf42e3bb1a54a6417022fcac593f59c4ca6df25f4f35

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-20T19:31:14Z",
        "uuid": "01a11324-0c41-71ee-859a-281c363e2022",
        "scanned_at": "2026-10-06T21:34:59Z",
        "final_url": "https://store-epicgames.com/",
        "status": 200,
        "ip": "46.29.26.38",
        "ips": [
            "46.29.26.38"
        ],
        "asns": [
            "132359"
        ],
        "countries": [
            "TR"
        ],
        "doc_hash": "9f22966a8dc6d682575ca3af8bf32c51e65d2f3b76d92bee3f896121a47bc345",
        "globals": [
            "_d807",
            "_a071",
            "_f7b7",
            "_s7b6",
            "_x5d0",
            "_x568",
            "_x7d3",
            "_xb75",
            "_x05e",
            "_x6f6",
            "_x436",
            "_x300",
            "_x378",
            "_xd82",
            "_x76e",
            "_xaab",
            "_x911",
            "_xe89",
            "_x530",
            "_x95d",
            "_x25e",
            "_xa06",
            "_xc36",
            "_x3db",
            "_x736",
            "_x306",
            "_x55c",
            "_xdab",
            "_x91d",
            "_x1ed",
            "_xf12",
            "_x451",
            "_xa6e",
            "_x685",
            "_x613",
            "_xbe3",
            "_x1af",
            "_x938",
            "_xd8d",
            "_x0e7"
        ],
        "cookies": [
            "sil_ses",
            "__Host-sil_ses",
            "sil_gate",
            "__Host-sil_gate"
        ],
        "tls": {
            "san": [
                "store-epicgames.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR1",
            "subject": "store-epicgames.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-12-09T14:17:15Z",
            "valid_from": "2026-09-10T14:17:16Z"
        },
        "domain_age_days": 924,
        "apex_age_days": 924,
        "tls_age_days": 26,
        "tls_valid_days": 89,
        "requests": 4,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 72,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-20T19:40:14Z",
        "uuid": "545bc761-af23-4eca-b60b-d88dc6293ed8",
        "scanned_at": "2026-10-06T21:18:26Z",
        "final_url": "https://store-epicgames.com/",
        "status": 200,
        "history": [
            {
                "url": "https://store-epicgames.com/",
                "status": 200
            }
        ],
        "dom_hash": "bc948235e9efeda3c8d176de53504109efd904a0c8a0ba260d9c0d5db04d3bb4",
        "doc_hash": "5a67a0c9d855dd1f078766f213076158894ab7f2d10f1ec89cc432107ba0849c",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "store-epicgames.com",
                "type": "A",
                "value": "46.29.26.38"
            }
        ],
        "dnssec_valid": false,
        "ip": "46.29.26.38",
        "whois": {
            "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com",
            "created": "2026-09-10T14:44:20Z",
            "updated": "2026-09-10T15:10:17Z",
            "expires": "2027-09-10T14:44:20Z",
            "nameservers": [
                "a.dnspod.com",
                "b.dnspod.com",
                "c.dnspod.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-21T11:50:56Z",
        "analysis_at": "2026-10-10T02:00:19Z",
        "stats": {
            "timeout": 0,
            "harmless": 51,
            "malicious": 5,
            "suspicious": 2,
            "undetected": 34
        },
        "detections": {
            "CRDF": "malicious",
            "Fortinet": "spam",
            "SOCRadar": "phishing",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "phishing",
            "Bfore.Ai PreCrime": "malicious",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Phishing, Newly Registered (alphaMountain.ai)"
        },
        "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com",
        "created": "2026-09-10T14:44:20Z",
        "expires": "2027-09-10T14:44:20Z",
        "updated": "2026-09-10T15:10:17Z",
        "first_seen": "2024-03-28T08:04:47Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "a.share-dns.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "b.share-dns.net"
            }
        ],
        "dns_at": "2026-10-10T02:00:31Z",
        "jarm": "29d3fd00029d29d00042d43d00041d5de67cc9954cc85372523050f20b5007",
        "cert": {
            "san": [
                "store-epicgames.com"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "599ef288ed18dccf04e319cebcd11ccc7b3",
            "sha256": "cdf125ea7759658c513eb3392210665565988e55bb59c0cceade238bfa67b2ad",
            "subject": "store-epicgames.com",
            "valid_to": "2026-12-09T14:17:15Z",
            "valid_from": "2026-09-10T14:17:16Z"
        },
        "whois": {
            "registrar": "GMO Internet Group, Inc. d/b/a Onamae.com",
            "registrar_iana_id": "49",
            "registrar_url": "https://internet.gmo/",
            "created": "2026-09-10T14:44:20Z",
            "updated": "2026-09-10T15:10:17Z",
            "expires": "2027-09-10T14:44:20Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "a.dnspod.com",
                "b.dnspod.com",
                "c.dnspod.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-09-09T15:00:00Z",
                "last changed": "2026-09-10T15:10:36Z",
                "registration": "2026-09-10T05:44:21Z",
                "registrar expiration": "2027-09-09T15:00:00Z",
                "last update of RDAP database": "2026-10-06T22:20:08Z"
            }
        }
    }
}
```