faceit-status-verify[.]com

faceit-status-verify.com is currently offline but historical data show it was provisioned on February 21, 2026 and immediately pointed at Cloudflare edge IP 172.67.199.107. The domain resolved through Cloudflare nameservers adi.ns.cloudflare.com and jose.ns.cloudflare.com and presented a valid TLS certificate issued by Let’s Encrypt (E7). HTTP requests returned a 403 status, indicating the server was configured to deny direct access, a pattern often used to hide phishing content until a specific payload is delivered. The page title reported by the scanner was “faceit.com”, matching the brand name of a popular gaming platform, which aligns with the classified scam type of credential phishing.

Ten of ninety‑three VirusTotal scanners flagged the domain as malicious, and it is listed on a single external blocklist and has been actively blocked by the PhishDestroy service. The registrar listed is NiceNIC International Group Co., Limited, and the infrastructure is hosted within AS13335 Cloudflare, Inc., located in the United States. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the low‑reputation assessment. No additional intelligence such as payload samples, phishing page screenshots, or URL patterns has been published, leaving the exact content and lure mechanisms unverified.

Defenders should continue to deny traffic to the domain and its associated IP, add the domain to URL filtering and DNS sinkhole rules, and monitor for any resurgence on the same IP or Cloudflare name‑server pair. Because the TLS certificate is legitimate, network‑level inspection of encrypted traffic may be required to detect any future re‑hosting of phishing pages. Ongoing correlation with threat intel feeds for similar credential‑phishing campaigns targeting the “faceit.com” brand is recommended.