faceit[.]en-vertex-clubgg[.]com

Analysis of faceit.en-vertex-clubgg.com as of July 25 2026 shows that the domain was registered on December 28 2025 through NiceNIC International Group Co., Limited. It resolves to the IPv4 address 92.53.96.141, which belongs to AS9123 JSC TIMEWEB in Russia. The authoritative name servers listed are ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org and ns4.timeweb.org, confirming the hosting provider. No TLS certificate is presented, indicating the site is served over plain HTTP. The page title returned by the server is “FACEIT Cloud Events”, suggesting an attempt to reference the FACEIT brand, and the intelligence categorizes the activity as a brand impersonation scam targeting the “across” brand.

The domain appears on a single security blocklist and has been blocked by the PhishDestroy service. Reputation services rate the domain poorly: Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser gives a score of 1 out of 100. VirusTotal analysis shows that 15 of 93 scanned security vendors flagged the domain, reinforcing the malicious assessment. The current operational status is offline, indicating the infrastructure has been taken down or is no longer serving content. Uncertainty remains regarding the specific payload or credential‑stealing mechanisms, as no page content has been captured and no SSL/TLS fingerprint is available.

The lack of a certificate also prevents verification of any potential phishing login forms. Defenders should continue to block the domain at network perimeter devices, add the IP 92.53.96.141 to deny lists, and monitor for any re‑registration attempts under similar sub‑domains. Threat‑intel feeds should be updated to reflect the brand‑impersonation classification, and users should be warned that any unsolicited communications referencing FACEIT Cloud Events may be malicious. Ongoing observation of the associated nameservers and ASN is recommended to detect future infrastructure reuse.