tw-vertex-club[.]com

Analysis of tw-vertex-club.com indicates a brand‑impersonation campaign that was taken offline prior to this report (July 23 2026). The domain was registered on 07 Nov 2025 through Dominet (HK) Limited and resolves to 92.53.96.141, an address owned by AS9123 JSC TIMEWEB in Russia. DNS resolution uses four timeweb‑controlled name servers (ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org) plus pns61.cloudns.net, suggesting the attacker leveraged a legitimate hosting provider to mask infrastructure. No SSL certificate is present, meaning HTTP connections are unencrypted.

The site’s HTML title reads “FACEIT Cloud Events,” but no further content analysis is available. Threat‑intel aggregation shows the domain appears on a single blocklist (PhishDestroy) and has been catalogued in fifteen AlienVault OTX pulses, reflecting moderate visibility in the threat‑sharing community. VirusTotal scans report fourteen of ninety‑five security vendors flagging the domain, reinforcing the malicious classification. Gridinsoft assigns a trust score of zero out of one hundred, indicating an extremely low reputation.

The campaign’s stated target is the generic “across” brand space, implying the intent to lure victims from multiple services rather than a single, named brand. Defenders should immediately block the host IP and all associated name servers, add the domain to local and network‑wide blocklists, and monitor for any residual traffic or attempted resolutions. Continuous re‑scanning with sandbox and URL‑reputation services is advised to detect any re‑hosting attempts, and incident response teams should audit logs for connections to the listed IP during the domain’s active period.