faceit[.]en-vertexclub[.]com

This report analyzes the domain faceit.en-vertexclub.com, identified as an impersonation scam targeting the FACEIT brand. The site’s page title, “FACEIT Cloud Events,” combined with its classification as an impersonation threat, indicates it was designed to mimic FACEIT’s official services. The primary threat is credential theft or phishing, as users may be tricked into providing login details or personal information on a fraudulent platform posing as a legitimate event service.

Technical analysis reveals the site was flagged by 12/95 VirusTotal vendors, with specific alerts from ADMINUSLabs, BitDefender, CRDF, CyRadar, and ESET. It appears on 2 blocklists. The domain was created on 2025-12-30 and registered through NiceNIC International Group Co., Limited. The IP address is 2a03:6f00:6:1::b972:f755, hosted in Russia (RU) under AS9123 JSC TIMEWEB. No SSL certificate was present. The nameservers are ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, and ns4.timeweb.org. GridinSoft trust rating is 0/100.

As of the report date, the site is DOWN/OFFLINE, indicating it may have been taken down or is temporarily inactive. The DOM risk score of 30 suggests a moderate but not critical risk level. Given the impersonation of a known brand, lack of SSL, and high vendor detection rate, this domain poses a significant threat to users. It is recommended to block all associated IPs and domains to prevent future access.