en[.]faceit-vex-arena[.]com

The domain en.faceit-vex-arena.com was registered on March 12, 2026 through CNOBIN INFORMATION TECHNOLOGY LIMITED and is currently taken offline. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geo‑located in the United States. The site was served over HTTPS using a Let’s Encrypt certificate (E8), and the underlying stack includes PHP, Bootstrap, Cloudflare Browser Insights, and HTTP/3 support, indicating a typical modern web hosting configuration. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy, reflecting external confirmation of malicious intent.

Reputation services provide mixed signals: Scamadviser assigns a trust score of 46 / 100, while Gridinsoft rates the domain at 0 / 100, suggesting a low level of confidence in the site’s legitimacy. VirusTotal analysis shows that one out of ninety‑four security vendors flagged the domain, providing a minimal but non‑zero detection signal. The page title returned by the server is “Faceit Universe,” but no further content analysis is available because the site is offline.

Defenders should treat this domain as a confirmed phishing vector given its blocklist inclusion, low trust scores, and certificate usage consistent with fast‑flux or disposable hosting patterns. Recommended actions include adding the domain to internal blocklists, monitoring DNS queries for the associated IP and nameservers (konnor.ns.cloudflare.com and phoenix.ns.cloudflare.com), and extending threat intelligence feeds to capture any resurgence. Continued observation of the IP address for other malicious hosts is advised, as Cloudflare‑hosted IPs are frequently shared among unrelated campaigns.