en-vertexclub[.]com

This domain is flagged for elevated-risk brand impersonation, specifically targeting the 'across' brand. The threat type involves fraudulent representation to deceive users into interacting with malicious infrastructure under the guise of legitimate services, as evidenced by the page title 'FACEIT Cloud Events,' which does not align with the impersonated brand's known offerings.

Analysis indicates en-vertexclub.com was registered on December 30, 2025, through NiceNIC International Group Co., Limited. It resolves to IP address 87.249.38.179, hosted on AS9123 (JSC TIMEWEB) in Russia. The domain is detected by 18 out of 95 security vendors on VirusTotal and appears on two security blocklists: PhishDestroy and PhishingDB. No SSL certificate is present, increasing the risk of unencrypted data interception. The domain has since been taken offline, but residual risk remains for systems that previously interacted with it.

Mitigation steps for brand impersonation threats include immediate blocking of the domain and its associated IP (87.249.38.179) at the network perimeter. Security teams should review logs for connections to this domain or IP, particularly those occurring between its creation date and takedown. User awareness training should emphasize verification of domain legitimacy, especially for communications or pages claiming affiliation with 'across' or similar brands. Monitoring for newly registered domains with similar naming patterns (e.g., 'vertexclub') is recommended to preemptively identify related threats.