faceit[.]en-victoryhub[.]com

The domain faceit.en-victoryhub.com was identified as a generic phishing threat targeting the FACEIT gaming platform. The site masqueraded as a legitimate FACEIT cloud events page to trick users into divulging login credentials or other sensitive information. No specific drainer kit was identified, but the domain's structure and page title closely mimic official FACEIT services.

Technical analysis reveals that 19 out of 95 security vendors on VirusTotal flagged this domain as malicious. It was registered through NiceNIC International Group Co., Limited and resolves to IP address 87.249.38.179. The domain was created on February 21, 2026, and its SSL certificate was issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020). The domain appears on 2 security blocklists and was not listed on Google Safe Browsing (GSB) at the time of analysis.

As of the latest check, the domain has been taken offline and is no longer resolving. However, users who may have visited the site while it was active should change their FACEIT passwords immediately and enable two-factor authentication. Remaining risk is low due to the domain being offline, but similar phishing campaigns may reappear under different domains. Users should always verify URLs before entering credentials and report any suspicious sites to FACEIT support.