plus-face-punch[.]com

The domain plus-face-punch.com was registered on July 15, 2026 through Fewmoretaps OU d/b/a Trustname.com and is currently active. Infrastructure analysis shows the domain is delegated to Cloudflare nameservers bailey.ns.cloudflare.com and ivan.ns.cloudflare.com and resolves to the address 5.175.218.201. The domain appears on a single security blocklist, having been listed by PhishDestroy, which indicates that at least one anti‑phishing feed has identified it as malicious. VirusTotal scans report that eight of ninety‑five antivirus and URL‑reputation engines flag the domain, reinforcing the suspicion of malicious intent. No public SSL certificate details, HTTP response codes, page title, or content analysis have been published, so the exact nature of the hosted payload remains unknown. The lack of additional detections beyond the eight vendors suggests limited exposure in public scanning platforms, but the presence on a dedicated blocklist and the early detection count warrant a high‑risk classification. Defenders should immediately block plus-face-punch.com at perimeter firewalls and DNS resolvers, add its IP address 5.175.218.201 to network‑level deny lists, and monitor for any outbound connections to that host. Continuous re‑scanning of the domain and its IP is advised, as further indicators such as page content, SSL fingerprints, or additional vendor detections may emerge. Organizations should also review any recent user‑reported suspicious emails that reference the domain, as credential‑harvesting campaigns often use lure messages to drive victims to the site.