epic-games[.]click

This domain is flagged as an elevated-risk phishing site specializing in fake access verification schemes. Analysis indicates it was designed to mimic legitimate authentication portals, likely targeting user credentials through deceptive login prompts. The page title 'Access Verification' suggests an attempt to trick victims into submitting sensitive information under the guise of security checks or account validation procedures. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain epic-games.click was registered through Gname.com Pte. Ltd. on April 01, 2026, with an unusually future creation date that may indicate domain age manipulation. It resolves to IP address 217.60.39.100 and employs Nginx with OpenResty, a common configuration for phishing infrastructure. Security vendor detection on VirusTotal shows 12/95 engines flagging the domain, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and was specifically blocked by PhishDestroy, confirming its malicious classification. Current status shows the site has been taken offline, though historical DNS records may still pose residual risks. Mitigation requires immediate action from both network administrators and end users. Network-level protections should include DNS sinkholing for 217.60.39.100 and domain blocking for epic-games.click across all security gateways. Endpoint security solutions should be configured to detect and prevent access to domains registered through Gname.com Pte. Ltd. with recent creation dates. Users who may have interacted with this domain should be instructed to reset credentials for any accounts accessed during the exposure window, with particular attention to accounts protected by multi-factor authentication. Security teams should monitor for follow-up phishing attempts using similar 'Access Verification' themes or domains with comparable naming patterns.