faceit[.]cup37[.]com

faceit.cup37.com is a recently registered sub‑domain (created 21 Feb 2026) that mimics the branding of FACEIT.com, as indicated by the page title “Overview – ForgeX Cup #37 – 5v5 Tournament – FACEIT.com”. The domain resolves to the IP address 72.61.21.52, which belongs to AS47583 Hostinger International Limited and is geolocated in Germany. DNS resolution is provided by Cloudflare nameservers (aspen.ns.cloudflare.com, odin.ns.cloudflare.com). No TLS certificate is presented, meaning the site only serves HTTP traffic, a characteristic often observed in phishing infrastructure seeking to avoid certificate costs and reduce traceability. Threat intelligence sources have begun to flag the domain.

It appears on one public blocklist and is explicitly listed by PhishDestroy as a malicious entry. VirusTotal reports that 7 of 93 scanned security vendors have marked the domain as malicious, providing independent corroboration of its suspicious nature. The registrar listed is Global Domain Group LLC, a provider that hosts many disposable or short‑lived domains used in fraudulent campaigns. As of the reporting date (24 July 2026) the site has been taken offline, preventing direct observation of its content. Consequently, details such as login forms, credential‑harvesting mechanisms, or redirection behavior remain unknown.

Nevertheless, the combination of a brand‑targeted page title, recent registration, lack of TLS, hosting on a shared provider, and multiple vendor detections strongly suggests a targeted phishing operation aimed at FACEIT users, likely to harvest credentials for the gaming platform. Defenders should proactively block the domain and its associated IP address at perimeter firewalls and DNS filtering solutions. Continuous monitoring of the Cloudflare name servers for any re‑activation, as well as adding the domain to internal blocklists, is advised.