challengegg[.]pro

challengegg.pro is currently listed as offline but historical data shows it was hosted on Cloudflare's network (AS13335) and resolved to IP 172.67.210.219, a US‑based address. The domain was registered through Cloudflare, Inc., and uses Cloudflare authoritative name servers harleigh.ns.cloudflare.com and howard.ns.cloudflare.com. No TLS certificate was observed, indicating the site was served without HTTPS. VirusTotal scans recorded nine of ninety‑five security vendors flagging the domain, consistent with its classification as a brand‑impersonation campaign targeting the esports organization celer.

The page title returned by HTTP requests was “Global | eSports and Gaming Community”, which aligns with the advertised focus on gaming communities but does not provide direct evidence of malicious content. Reputation services assign extremely low trust scores—Scamadviser 1/100 and Gridinsoft 1/100—reflecting a high likelihood of abuse. The domain appears on a single public blocklist and is actively blocked by PhishDestroy. The combination of a low vendor detection count, presence on a blocklist, and the brand‑impersonation tag suggests the site was used to lure victims by masquerading as a legitimate celer‑related community.

Because the site is offline, live content cannot be verified, and the exact payload or credential‑harvesting mechanisms remain unknown. Defenders should continue to block the IP 172.67.210.219 at network perimeter, enforce DNS filtering for the domain, and add the domain to internal blacklists. Monitoring for newly created domains that resolve to Cloudflare name servers and reference celer‑related keywords can help detect similar campaigns. Ongoing review of threat‑intel feeds for additional indicators, such as URL paths or phishing kits associated with this campaign, is recommended.