Is epicgames.com legit?
Epicgames.com is a well-established and generally trustworthy site with strong technical infrastructure and security. However, some transparency issues related to bot protection and minor branding oversights prevent a higher trust score.
Gaming average: 71/100 · based on 9 sites
Checked: April 21, 2026 at 7:12 AM UTC
Is epicgames.com a scam? Here's what we found.
The site exhibits excellent security practices with a valid SSL certificate, modern TLS 1.3, an HSTS header, and clickjacking protection, along with a clean Google Web Risk report.
Epicgames.com benefits from an extremely long domain age, registered with a reputable registrar, which strongly indicates a stable and long-standing entity behind the website.
A high Tranco rank and clean DNS blacklists contribute positively to its reputation, although the lack of a Trustpilot profile and inability to check Web Archive prevent a higher score for external trust signals.
Transparency is somewhat hindered by bot protection preventing access to contact information and social media, and the missing favicon suggests a minor branding oversight.
While the presence of some legal pages is good, bot protection limited full access, raising minor concerns about the discoverability of all compliance-related information.
The site has robust DNS and email infrastructure with DMARC configured, but the absence of structured data and a sitemap are minor improvements that could be made for optimal search engine interaction.
Signals Detected
This is one of the most visited websites globally
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
crt.sh returned status 429
Domain created 1995-01-10T05:00:00Z (31 years, 8 months ago)
Registered through MarkMonitor Inc.
Expires in 578 days
DNSSEC status from WHOIS
Resolves to: 54.198.193.44, 100.52.142.2, 98.86.122.52
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., alt3.aspmx.l.google.com., alt4.aspmx.l.google.com.
Domain has DMARC email authentication configured
DNS providers: ns-1094.awsdns-08.org., ns-1720.awsdns-23.co.uk., ns-286.awsdns-35.com., ns-992.awsdns-60.net.
Valid certificate, expires in 189 days
Certificate issued by Amazon
Connection uses TLS 1.3
No favicon found — unusual for an established business
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
robots.txt has 8 directives and references a sitemap
Website returned HTTP 403 — likely WAF or bot protection blocking automated checks. The site is online but restricts non-browser access.
Bot protection prevented page inspection
Found one legal page; bot protection may be hiding the other
Bot protection prevented page inspection
Not found on any DNS blacklists
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.