faceit[.]eng-vertexclub[.]com

This domain is flagged for elevated-risk brand impersonation, specifically targeting gaming and cloud event platforms under the guise of legitimate services. The infrastructure mimics trusted environments to deceive users into disclosing credentials or downloading malicious payloads, a tactic commonly observed in credential harvesting campaigns. Analysis indicates the domain faceit.eng-vertexclub.com was registered on December 31, 2025, through NiceNIC International Group Co., Limited. It resolves to the IP address 87.249.38.179, located within the RU region under AS9123 (JSC TIMEWEB). At the time of assessment, the domain lacked an SSL certificate, a red flag for fraudulent activity. Detection engines on VirusTotal flagged the domain in 17 out of 95 scans, while security blocklists such as PhishDestroy and PhishingDB have included it in their databases, contributing to its presence on two distinct blocklists. The page title, 'FACEIT Cloud Events,' further reinforces the impersonation of a legitimate gaming platform. Mitigation for this threat involves immediate domain takedown requests to registrars and hosting providers, particularly those associated with the identified IP range. Organizations should update internal blocklists to include the domain and its resolving IP, while security teams are advised to monitor for similar impersonation patterns, such as newly registered domains with gaming-related keywords. End-users should be educated on verifying domain authenticity and SSL certificate validity before interacting with cloud event or gaming-related pages. Proactive monitoring of newly registered domains under registrars like NiceNIC can help preempt similar campaigns.