cupchallengers[.]net

This domain, cupchallengers.net, is identified as a brand impersonation threat specifically targeting Celer, a blockchain interoperability platform. The domain is currently offline, but prior activity suggests malicious intent to deceive users into believing they are interacting with legitimate Celer services. Analysis indicates the domain was designed to mimic Celer’s branding, potentially for credential harvesting, phishing, or fraudulent transactions involving cryptocurrency or sensitive user data. Infrastructure analysis reveals the domain was registered on October 24, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 45.154.58.150 and lacks an SSL certificate, increasing the risk of man-in-the-middle attacks or data interception. Security vendor assessments on VirusTotal show that 15 out of 95 vendors flag the domain as malicious, while AlienVault OTX lists it in five threat intelligence pulses. Additionally, the domain appears on one security blocklist, further confirming its association with malicious activity. The page title, 'Global | eSports and Gaming Community,' does not align with Celer’s core services, indicating an attempt to obfuscate its true purpose. Current status indicates the domain has been taken offline, reducing immediate risk to users. However, organizations and individuals should remain vigilant, as similar domains may emerge. Recommended actions include blocking the domain and its associated IP (45.154.58.150) at the network level, monitoring for related infrastructure (e.g., subdomains or newly registered lookalike domains), and educating users about brand impersonation tactics. Security teams should also review logs for prior connections to this domain or IP to assess potential exposure. If credentials or sensitive data were entered on this site, immediate password resets and multi-factor authentication enforcement are advised.