faceit[.]auth-victoryhub[.]com

The domain faceit.auth-victoryhub.com has been identified as a generic phishing site targeting the FACEIT brand. This threat is designed to impersonate FACEIT Cloud Events, luring users into entering their credentials on a fraudulent login page. The site is currently offline, but it represents a significant risk to FACEIT users who may have encountered it while active.

Technical analysis reveals that this domain was created on February 21, 2026, and registered through NiceNIC International Group Co., Limited. It resolves to IP address 87.249.38.179 and has no SSL certificate, which is a major red flag. VirusTotal reports that 20 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. These indicators confirm the domain's malicious intent and its association with credential harvesting.

Although the domain has been taken offline, the threat may persist through similar domains or redirects. Users who may have visited the site should change their FACEIT passwords immediately and enable two-factor authentication. PhishDestroy recommends avoiding any interaction with this domain and reporting any related suspicious activity to FACEIT support. Continued vigilance is advised as phishing campaigns often resurface under different domains.