challengez[.]net

This investigation confirms that the domain challengez.net was actively used for brand impersonation targeting the Celer brand before being taken offline. The domain was registered on December 01, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IPv4 address 193.221.201.80, which is announced by AS205775 (NEON CORE NETWORK LLC) located in Germany. DNS resolution is provided by the four RegWay nameservers dns1.regway.com through dns4.regway.com. No TLS certificate was observed, indicating that the site operated over plain HTTP.

The visible page title, “Global | eSports and Gaming Community,” does not reference the targeted brand, suggesting that the site content was likely altered after initial detection or that the title was a placeholder. Reputation services assign extremely low trust scores, with Gridinsoft and Scamadviser each rating the domain 1 out of 100. Security vendors have flagged the domain widely: fifteen of ninety‑five VirusTotal scanners reported malicious activity, and the domain appears on one public blocklist, where it is listed by PhishDestroy. AlienVault OTX has referenced the domain in three separate threat pulses, reinforcing its association with malicious campaigns.

The current offline status indicates that the infrastructure has been dismantled or is no longer serving content, but the hosting IP and registrar details remain active and could be reused. Defenders should continue to block challengez.net at network perimeter and DNS layers, add the IP 193.221.201.80 to host‑based deny lists, and monitor for new domains registered by the same registrar or employing the same nameserver set. Ongoing vigilance against re‑use of the hosting provider and rapid sharing of indicators of compromise with threat‑sharing communities are recommended.