If you've come across user-search-service-prod.ol.epicgames.com and wondered whether it's safe, the short answer is yes — but with a twist. This is a subdomain owned by Epic Games, the company behind Fortnite and the Unreal Engine. The URL itself is not a consumer-facing website; it returns a 404 error, meaning the page doesn't exist or isn't meant to be accessed directly. That's normal for backend service endpoints that power things like user search requests inside the Epic ecosystem. So is user-search-service-prod.ol.epicgames.com a scam? No. The parent domain is verified and above board. But if you were expecting a login page or a store, you've landed on the wrong address. There's nothing to buy, sign up for, or download here. The site doesn't have a privacy policy or contact information because it's not a standalone business — all of that lives on the main Epic Games site. For a gaming infrastructure endpoint, this is exactly what you'd expect. If you see this URL in a phishing email or suspicious link, check the full domain: as long as it ends with .epicgames.com and the rest of the URL looks legitimate, it's likely real. But since the page is dead, there's no reason to interact with it. Trust the domain, ignore the 404.
Yes — user-search-service-prod.ol.epicgames.com looks safe
In plain English
This subdomain belongs to Epic Games, a major and trusted gaming company. The URL itself returns a 404 error, meaning there's no actual page to visit or interact with. It's not a scam, but it's also not a site you'd use directly — it's likely a backend service endpoint that shouldn't be accessed by consumers.
Where the score comes from
The site uses a valid SSL certificate from Amazon and modern TLS encryption, which is standard for a legitimate backend service. The lack of security headers is not a concern here since this endpoint isn't meant to serve web pages to users.
This is a subdomain of epicgames.com, a well-known and trusted company in the gaming industry. The parent domain's identity is clear and established. The missing WHOIS result is expected for a subdomain query.
No blacklist issues, no Google Web Risk flags, and the domain itself has a long history through Epic Games. The lack of Wayback Machine snapshots is normal for a subdomain that isn't meant to be crawled or archived.
A dedicated subdomain for a service endpoint doesn't need an about page or contact info. The main epicgames.com site provides full transparency. This is entirely expected for a technical backend URL.
Legal pages like privacy policy and terms of service are hosted on the parent domain, not on every subdomain. This is standard practice. The absence here is not a compliance gap.
The site is hosted on Amazon AWS, which is reliable, and DNS resolution works. The lack of DNSSEC and email records is typical for a service endpoint that doesn't handle email or user-facing content.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →