join[.]clubfaceitauth[.]com

The domain join.clubfaceitauth.com was registered on 21 February 2026 and is currently hosted on the IP address 31.97.188.197, which belongs to AS47583 Hostinger International Limited in Malaysia. The site is presently taken offline, but historical observations indicate that it was flagged by multiple security services. It appears on one public blocklist and is explicitly blocked by PhishDestroy, confirming that security operators have identified it as malicious. VirusTotal scans show that 16 of 93 antivirus and URL‑reputation engines flagged the domain, reinforcing the suspicion of abuse. The SSL certificate presented for the host is rated R13, a low trust rating that often accompanies fraudulent sites.

Gridinsoft, a reputation scoring system, assigned a trust score of 0 out of 100, indicating no confidence in the domain’s legitimacy. The page title returned from the HTTP response is “GO VERIFY YOURSELF”, which aligns with the reported scam type of a gaming‑related deception targeting Steam users. The brand target is explicitly listed as Steam, and the scam classification is identified as a gaming scam, suggesting that the site likely attempted to lure Steam account credentials by prompting victims to verify their identity. Infrastructure analysis shows that the hosting provider, Hostinger, is a common platform for abuse due to its low‑cost, high‑volume services, and the Malaysian location does not provide any inherent mitigation. The combination of a recent registration date, low trust scores, a weak SSL rating, and multiple vendor detections points to a deliberately crafted impersonation effort rather than an accidental misconfiguration.

Uncertainty remains regarding the exact content served before the takedown, as the site is currently offline and no visual snapshots are available. Analysts cannot confirm whether credential‑capture forms or additional redirect mechanisms were present.