MALICIOUS — CRITICAL
Verifica phishing e sicurezza per facepunch.cc
facepunch[.]
PhishDestroy identifies facepunch.cc as an active crypto drainer domain designed to steal cryptocurrency via fake login pages that impersonate legitimate services.
- VirusTotal
- 16/91
- Blocklists
- No stored match
- Disponibilità
- Contenuto non disponibile · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
facepunch.cc — Contenuto non disponibile (HTTP 502). Simulazione del marchio: Genericcrypto; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 16/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLScan malicious verdict; PhishDestroy score 95/100. Registrar: NameCheap.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
PhishDestroy identifies facepunch.cc as an active crypto drainer domain designed to steal cryptocurrency via fake login pages that impersonate legitimate services. This domain mimics the branding of Facepunch Studios to trick users into entering wallet credentials or downloading malicious payloads disguised as game-related content. The site leverages social engineering tactics, such as urgency (e.g., "account suspension") or exclusive offers, to prompt users into actions that expose their private keys or seed phrases. This domain was flagged by PhishDestroy with an elevated risk level due to multiple red flags: only 2 out of 95 VirusTotal security vendors detected it as malicious, indicating low detection rates by automated scanners. It was registered through NameCheap, Inc. on April 15, 2026, a suspiciously recent creation date that suggests opportunistic domain squatting. The domain resolves to IP address 188.114.97.3, which has been linked to similar crypto drainer campaigns. Its SSL certificate, issued by Let’s Encrypt, adds a false sense of legitimacy, as scammers often exploit free certificates to appear trustworthy. The combination of low detection rates, a newly registered domain, and association with known malvertising infrastructure underscores its malicious intent. If you visited facepunch.cc, immediately disconnect from the internet and revoke any permissions granted to the site. Do not enter any credentials, wallet addresses, or seed phrases. Scan your device with reputable antivirus software and consider transferring remaining funds to a new wallet. Report the domain to PhishDestroy and your wallet provider to help block further attacks. Always verify URLs manually and use bookmarked links for official sites—never rely on search results alone.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 4 identified
Twitter Ads is an advertising platform for Twitter 'microblogging' system.
ads.twitter.com Confidenza al 100%Facebook pixel is an analytics tool that allows you to measure the effectiveness of your advertising.
facebook.com Confidenza al 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of facepunch.cc · checked May 7, 2026
Dati e relazioni esterneIndependent lookups and source reports
PD-20260506-9597D3 Recipient: abuse@namecheap.com Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.