xn--e1agc6agh[.]com

The domain xn--e1agc6agh.com was registered on February 21, 2026 through NiceNIC International Group Co., Limited and remains active as of the report date, July 24, 2026. It resolves to the IP address 172.67.210.99, which belongs to AS13335 Cloudflare, Inc. in the United States, and is served by the Cloudflare nameservers randy.ns.cloudflare.com and zita.ns.cloudflare.com. The site presents an HTTPS certificate issued by Let’s Encrypt (E7) and returns an HTTP 200 status code, indicating a reachable web service. The page title observed is "FACEIT — Турниры КС2 :: Официальный Сайт платформы для амбициозных игроков и профессионалов!", explicitly referencing the FACEIT platform and the Counter‑Strike 2 tournament ecosystem, thereby confirming the brand‑impersonation intent.

Detected technologies include Unpkg, Cloudflare, AOS, and HTTP/3, all consistent with a modern CDN‑backed web presence. Threat intelligence sources show that three of ninety‑five VirusTotal scanners flag the domain, Gridinsoft assigns a trust score of 0 / 100, and the domain appears on at least one public blocklist, with PhishDestroy already blocking it. These indicators collectively support a high‑risk classification for brand impersonation targeting Counter‑Strike players.

While the current evidence confirms the domain’s malicious intent and infrastructure, the specific payload, credential‑collection mechanisms, or additional malicious resources hosted on the site have not been publicly disclosed. Defenders should therefore prioritize immediate blocking of xn--e1agc6agh.com at network borders, update URL filtering policies, and monitor DNS queries for the associated Cloudflare nameservers. Continuous re‑assessment is advised to detect any evolution of the campaign, such as the deployment of new phishing pages or the use of additional subdomains.