faceit-confirms[.]com

The domain faceit-confirms.com is flagged as a crypto‑related scam. Registration records show the domain was created on 27 May 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Infrastructure analysis reveals the domain resolves to IP 104.21.7.139, an address owned by AS13335 Cloudflare, Inc. in the United States. The site presented a TLS certificate labeled “WE1”, indicating a valid HTTPS endpoint at the time of observation.

VirusTotal scans report that four of ninety‑three security vendors classified the domain as malicious, and PhishDestroy has added it to its blocklist, confirming the presence of phishing activity. Additional intelligence identifies the page title “Faceit‑confirms: Most Popular Online Crypto Casino Based on Blockchain”, which aligns with the listed scam type of a crypto scam and matches the “Gambler Scam” phishing kit signature. Gridinsoft’s trust score of 0 / 100 further underscores the malicious nature of the site. The domain appears on a single external security blocklist, and its current HTTP status is offline, suggesting the phishing infrastructure may have been taken down or is temporarily dormant.

While the available data confirms the domain’s association with a crypto‑casino phishing campaign, the exact content of the landing page has not been captured, leaving details such as form fields or credential‑harvesting mechanisms unverified. Defenders should block the domain and its associated IP address at network perimeters, monitor for any resurgence of the domain or similar Cloudflare‑hosted assets, and update URL filtering and email security policies to include faceit‑confirms.com as a known malicious indicator. Continuous re‑scanning of the domain is recommended to detect any re‑activation.