epicgames[.]my

Analysis of the domain epicgames.my indicates it is actively engaged in phishing operations targeting users of Epic Games. The domain was registered on February 27, 2026, through Dynadot, LLC, and currently resolves to the IP address 172.67.150.214. Infrastructure analysis reveals the use of Cloudflare nameservers (kellen.ns.cloudflare.com and sky.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. As of July 22, 2026, the domain remains active and is flagged by 16 of 95 security vendors on VirusTotal, suggesting detection by major threat intelligence platforms.

It also appears on at least one security blocklist and is specifically blocked by PhishDestroy, further corroborating its malicious classification. The domain’s creation date, recent detection by multiple vendors, and presence on blocklists collectively indicate a high-risk phishing infrastructure. While the exact content of the site has not been analyzed, the domain name strongly suggests an intent to impersonate Epic Games, likely to harvest login credentials or payment details.

Defenders should treat this domain as hostile and prioritize blocking it at the DNS and network levels. Organizations are advised to monitor for connections to 172.67.150.214 and the domain itself, as well as to review logs for any user interactions that may indicate successful phishing attempts. Given the use of Cloudflare, additional scrutiny of related infrastructure may be warranted to identify other domains leveraging the same nameservers or IP ranges for similar campaigns.