faceit[.]tw-gglegendscup[.]com

Analysis indicates that the domain faceit.tw-gglegendscup.com was registered on 24 October 2025 through Dominet (HK) Limited. The domain resolves to IP address 92.53.96.105, which belongs to Autonomous System AS9123 operated by JSC TIMEWEB and is geolocated in Russia. All four authoritative name servers (ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, ns4.timeweb.org) plus pns61.cloudns.net resolve to the same hosting provider, confirming a single‑point hosting environment. No SSL certificate is presented for the site, leaving HTTP traffic unencrypted and exposing users to potential credential capture. Public scanning services have recorded 13 detections out of 95 security vendors on VirusTotal, indicating that multiple scanners flagged the domain as malicious.

Gridinsoft assigned a trust score of 0 out of 100, while Scamadviser reported a trust rating of 1 out of 100, both reflecting a very low reputation. The site appears on a single known blocklist and has been actively blocked by the PhishDestroy filtering service. Its current HTTP status is offline, suggesting the operators have taken the site down or it is no longer reachable. The page title returned by the server is “FACEIT Cloud Events,” and the scam type is classified as brand impersonation targeting an unspecified “across” audience.

No further evidence about the page content, login forms, or credential harvesting mechanisms is available in the collected intelligence. Given the combination of a recent registration, low reputation scores, multiple vendor detections, lack of TLS, and confirmation of blocklist inclusion, the domain should be treated as a high‑confidence brand‑impersonation threat. Defensive actions include adding the domain and its resolving IP address to network‑level blocklists, ensuring web filtering solutions block the host, and monitoring for any resurgence of the domain or related sub‑domains.