faceit[.]engvertex-clubgg[.]com

Analysis indicates that the domain faceit.engvertex-clubgg.com was operational as a phishing site until recently taken offline. Registered on January 14, 2026, through NiceNIC International Group Co., Limited, the domain resolved to IP 87.249.38.179, hosted on AS9123 JSC TIMEWEB in Russia. The page title 'Домен заблокирован в Timeweb' suggests the hosting provider blocked access, likely due to policy violations. Nameservers hold1.luxhost.org and hold2.luxhost.org were assigned, and the SSL certificate issued by GlobalSign GCC R3 DV TLS CA 2020 remains valid, though this does not confirm site legitimacy.

At the time of assessment, 19 of 93 security vendors on VirusTotal flagged the domain as malicious, and it appears on one security blocklist. The exact phishing target or scam type remains unconfirmed, as no brand or kit details are available from the provided data. The domain's infrastructure, including its Russian hosting and recent registration, aligns with common phishing patterns, though no direct evidence links it to a specific campaign. Defenders should treat this domain as compromised and block it at the network level.

The SSL certificate should not be trusted for this host. Since the site is offline, no active threat is present, but historical logs should be reviewed for connections to 87.249.38.179 or faceit.engvertex-clubgg.com. If the domain reactivates, monitoring tools should prioritize re-evaluation. No further action is required unless new indicators emerge.