zavod2281[.]icu

This report analyzes the domain zavod2281.icu, a malicious site identified as an impersonation threat. The site's page title, "Global | eSports and Gaming Community," claims to represent a legitimate eSports and gaming community. However, the site is a scam type classified as Impersonation, specifically targeting the brand "celer." The threat posed is that the site attempts to deceive users into believing it is an official celer platform, likely to steal credentials, personal data, or financial information from the gaming community.

Technical evidence from the provided data shows the domain was flagged by 6 out of 95 VirusTotal vendors. It is listed on blocklists by 2 security vendors, including alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Phishing Database, and Seclookup. The domain is hosted on IP address 2606:4700:3031::6815:dd0, located in the United States, and is associated with registrar AS13335 Cloudflare, Inc. The domain was created on February 21, 2026, and uses SSL certificate type WE1.

The current status of zavod2281.icu is DOWN/OFFLINE, meaning it is not accessible to users. The domain risk score is 73, indicating a high risk level. The combination of impersonating a known brand, multiple security vendor flags, and a high risk score confirms this is a significant threat, though its offline status reduces immediate danger.