faceit-verifyclubs[.]com

This domain is flagged as an elevated-risk credential phishing site specifically designed to impersonate FACEIT, a competitive gaming platform. The threat involves a fake login portal under the page title 'FACEIT - Clubs Verify,' aimed at harvesting user credentials through brand impersonation. Analysis indicates the domain was created to deceive users into entering sensitive account details, which could lead to unauthorized access or account takeovers. Infrastructure analysis reveals the domain faceit-verifyclubs.com was registered on February 21, 2026, through REGRU-RU, a registrar frequently associated with malicious activity. It resolves to the IP address 104.21.6.149, hosted on Cloudflare's network (AS13335), a common tactic to obscure hosting origins. The domain is detected by 11 out of 95 security vendors on VirusTotal, appears on at least one security blocklist, and is currently offline. The SSL certificate is issued by Google Trust Services (WE1), which does not inherently validate legitimacy but is often exploited to lend a false sense of security to phishing pages. Mitigation for this specific threat type involves immediate user awareness and technical controls. Organizations should block the domain and associated IP at the network level, while users should be educated to verify URLs before entering credentials, particularly for gaming-related logins. Multi-factor authentication (MFA) should be enforced for all accounts to reduce the impact of credential theft. Additionally, monitoring for similar domains using the 'faceit' brand name or variations of 'verifyclubs' is recommended to preemptively identify related phishing campaigns. Security teams should prioritize reviewing logs for any interactions with this domain or its IP address to assess potential compromise.