lockflex[.]world

The domain lockflex.world is assessed at an elevated risk level for credential theft. This domain impersonates Epic Games, likely to deceive users into providing their login credentials for Fortnite or other related services. The threat is significant due to the potential for unauthorized account access and data exfiltration.

Analysis indicates that the domain lockflex.world was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 03, 2026. VirusTotal reports that 17 out of 95 security vendors flag this domain as malicious. The domain resolves to the IP address 172.67.180.144, which is located in the United States and belongs to AS13335 Cloudflare, Inc. The SSL certificate is issued by Let's Encrypt, indicating a possible attempt to appear more legitimate to unsuspecting users. The domain appears on one security blocklist and has been taken offline as of the latest assessment. The page title, 'Fortnite Inventory Checker | Epic Games,' further suggests the intent to mimic official Epic Games services. The current status of the domain being offline may indicate that the threat actors have moved their operations or that the domain has been taken down by security measures.

To mitigate the risk of credential theft associated with lockflex.world, users and organizations should ensure that all login credentials are unique and not reused across multiple platforms. Multi-factor authentication (MFA) should be enabled wherever possible to add an additional layer of security. Network administrators should monitor for any attempts to access this domain and block it at the network level to prevent any further interactions. Security awareness training should be conducted to educate users about the dangers of phishing and the importance of verifying the authenticity of web pages before entering sensitive information.