facepunch[.]cc

PhishDestroy identifies facepunch.cc as an active crypto drainer domain designed to steal cryptocurrency via fake login pages that impersonate legitimate services. This domain mimics the branding of Facepunch Studios to trick users into entering wallet credentials or downloading malicious payloads disguised as game-related content. The site leverages social engineering tactics, such as urgency (e.g., "account suspension") or exclusive offers, to prompt users into actions that expose their private keys or seed phrases. This domain was flagged by PhishDestroy with an elevated risk level due to multiple red flags: only 2 out of 95 VirusTotal security vendors detected it as malicious, indicating low detection rates by automated scanners. It was registered through NameCheap, Inc. on April 15, 2026, a suspiciously recent creation date that suggests opportunistic domain squatting. The domain resolves to IP address 188.114.97.3, which has been linked to similar crypto drainer campaigns. Its SSL certificate, issued by Let’s Encrypt, adds a false sense of legitimacy, as scammers often exploit free certificates to appear trustworthy. The combination of low detection rates, a newly registered domain, and association with known malvertising infrastructure underscores its malicious intent. If you visited facepunch.cc, immediately disconnect from the internet and revoke any permissions granted to the site. Do not enter any credentials, wallet addresses, or seed phrases. Scan your device with reputable antivirus software and consider transferring remaining funds to a new wallet. Report the domain to PhishDestroy and your wallet provider to help block further attacks. Always verify URLs manually and use bookmarked links for official sites—never rely on search results alone.