faceit[.]en-vertex-club[.]com

faceit.en-vertex-club.com is currently marked as offline but remains of interest to defenders. The domain was registered on February 21 2026 and resolves to the IPv4 address 87.249.38.179, which is hosted by AS9123 JSC "TIMEWEB" in Russia. The TLS certificate presented is identified as R13, indicating a valid SSL handshake but offering no assurance of legitimacy. The page title returned by the server is "FACEIT Cloud Events", and the site is classified as a brand-impersonation campaign targeting the FACEIT brand, with a specific crypto-scam motive.

Intelligence shows the domain is listed on one security blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis reports that 15 of 93 scanned security vendors flagged the domain, reinforcing the malicious assessment. The risk level is elevated.

Defenders should continue to block the domain at perimeter controls, monitor DNS queries for the resolved IP, and consider adding the IP to threat-intel feeds. Because the site is offline, further content analysis is limited; however, the combination of brand impersonation, crypto-scam classification, multiple vendor detections, and hosting location suggests a high likelihood of malicious intent. Ongoing observation for any re-activation or related infrastructure is recommended.