tw-legendscup[.]com

This domain, tw-legendscup.com, poses an elevated risk as a brand impersonation phishing site targeting users of the Across platform. The site masquerades as a legitimate FACEIT Cloud Events page, likely designed to deceive visitors into entering sensitive credentials, payment details, or other personal information under false pretenses. Analysis indicates the domain is crafted to exploit trust in the Across brand, potentially leading to account takeovers, financial fraud, or unauthorized access to user data. The threat is particularly concerning given the domain's focus on gaming or esports-related content, which may lower user vigilance among the target audience. Infrastructure analysis reveals multiple technical indicators confirming the malicious nature of this domain. The domain was registered on October 11, 2025, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.225.23.151, located in Russia under AS9123 (JSC TIMEWEB), a hosting provider commonly used for phishing and fraudulent activities. The domain lacks an SSL certificate, further reducing its legitimacy and increasing the likelihood of interception of transmitted data. Detection metrics provide additional confirmation: the domain is flagged by 14 out of 95 security vendors on VirusTotal and appears on two independent security blocklists, including PhishDestroy and PhishingDB. These factors collectively indicate a deliberate and sophisticated attempt to deceive users. Users who have visited tw-legendscup.com or interacted with its content should take immediate action to mitigate potential risks. First, cease all interaction with the domain and avoid entering any credentials or personal information. If credentials were submitted, change passwords immediately for the affected account and any other platforms where the same credentials may have been reused. Enable multi-factor authentication where available to add an additional layer of security. Monitor financial statements and account activity for any signs of unauthorized transactions or access. Users should also scan their devices for malware or unwanted software, as phishing sites may distribute malicious payloads. Finally, report the domain to relevant security teams or platforms to aid in broader mitigation efforts and prevent further victimization.