Güvenlik raporuna geç
Checked 09.08.2026 Ref 1C44596D

MALICIOUS — HIGH

facelees.cc için kimlik avı ve güvenlik kontrolü

facelees[.]cc

PhishDestroy identifies facelees.cc as an active generic-phishing domain designed to trick users into entering sensitive credentials.

56/100 evidence score · High
VirusTotal
2/94
Blocklists
No stored match
Kullanılabilirlik
Doğrulanmamış
Report / Add Evidence Appeal this listing
2026-03-26 23:55 UTCDoğrulanmamış

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Bu alan adı, zararlı olarak işaretlenmiştir
Güvenlik motorları bir algılama bildiriyor: 2. Çok dikkatli olun — kimlik bilgilerini veya kişisel bilgileri girmeyin.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . The recorded recipient is abuse@clodocloud.com. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
4 months
Reports sent
1
Latest case ID
PD-20260326-B865EF
Current status
Observed active at latest stored check
Jump to section
Rapor özeti

facelees.cc — Doğrulanmamış. Dolandırıcılık türü: Credential Phishing. Kanıt özeti: VirusTotal 2/94 (alphaMountain.ai, Forcepoint ThreatSeeker); Spamhaus DBL_SPAM; PhishDestroy score 56/100. Kayıt kuruluşu: NiceNIC.

Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.

Evidence Analysis

Ref 1C44596D

PhishDestroy identifies facelees.cc as an active generic-phishing domain designed to trick users into entering sensitive credentials. The site masquerades as a legitimate login portal while harvesting usernames and passwords for later misuse. Because the domain resolves to IP address 45.114.61.245 and relies on a Let’s Encrypt SSL certificate to appear trustworthy, victims may not realize they are submitting data to criminals. This domain was flagged by exactly 2 out of 95 VirusTotal security vendors, registered on July 23, 2022, and is currently managed through NICENIC INTERNATIONAL GROUP CO., LIMITED. These indicators align with a pattern seen in short-lived phishing campaigns that rapidly deploy and then disappear to evade takedowns. The combination of a recent creation date and low but non-zero detection rate suggests ongoing but still-evolving abuse. If you visited facelees.cc, stop using any credentials you may have entered and immediately change those passwords on a separate, trusted device. Run a full antivirus scan and consider enabling multi-factor authentication on all accounts that still allow it. Report the domain to your email provider, browser vendor, and the hosting provider’s abuse team so the site can be blocked for others.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
2 det.
URLScan
URLScan
TLS sertifikası
Let's Encrypt
Yaş
5 mo
Gözlemlenen durum
Doğrulanmamış
PhishDestroy
DestroyList
Listede
Reports Sent
1
Veri kapsamı12 recorded checks
VirusTotal 2 / 94 URLQuery checked — no detections recorded PhishStats checked — no match recorded OTX no community references CF Radarı scan completed URLScan capture saklanan rapor URLScan verdict Analiz tamamlandı DNS engellemeleri 10 kontrol edildi — engelleme yok TLS valid certificate, 45d WHOIS 5 mo old Ekran görüntüsü 3 captures · 3 sources Yönlendirme zinciri araştırılmadı
Ağ Güvenliği İstihbaratı Registrar context
Registrar context NiceNIC
Stored registration data identifies NICENIC INTERNATIONAL GROUP CO., LIMITED (IANA 3765) as the registrar. PhishDestroy maintains separate NiceNIC abuse-report research; registrar association is contextual and is not an independent detection for this domain.
NiceNIC Verdict Full Investigation

Tehdit Müdahale Pipeline

Keşif
Checks
Reports
Kullanılabilirlik
11/12
Tehdit Alındı
facelees.cc tespit edildi ve kapsamlı analiz için sıraya alındı
27.03.2026
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
URLScan analizi tamamlandı; bu web yakalama sonucu sayfa tehdidi kararını değiştirmez · score 0
29.07.2026
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
2/94 recorded on VirusTotal
18.07.2026
Google Safe Browsing
27.03.2026
Registrar Context: NiceNIC
Separate registrar research is available. Registrar association is contextual and is not scored as an independent detection.
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
Rapor, depolanan teknolojiyi veya adli analiz sonuçlarını içerir.
09.08.2026
Sent Report Recorded
Stored sent-report record for registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, hosting provider, 2 abuse contacts
abuse@clodocloud.comabuse@nicenic.net
26.03.2026
DestroyList Yayınlandı
27.03.2026
Kullanılabilirlik doğrulanmadı
En son yanıt mevcut kullanılabilirliği sınıflandırmak için yeterli değil.

Genel Engelleme Listesi Durumu

Kaydedilen görüntü

Etki Alanı Analizi

Alan adı
URLScan Verdict Analiz tamamlandı score 0 report ↗
Sunucu / ASN nginx · AS216154 CLODO CLOUD SERVICE CO. L.L.C
IP itibarı abuse score 0/100 0 reports checked 14.07.2026
IP adresi 45.114.61.245 NL
Coğrafi konumNL Amsterdam, NL
AS216154 · RAY ONN India Communicationss Private Limited
KayıtOluşturuldu 26.03.2026 (135d)
Elapsed Since First Report 24h
Neyi ölçüyoruz Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Doğrulanmamış.
Her raporun içeriği Saklanan giden rapor kayıtları, satıcı kararları, kayıt verileri, barındırma ayrıntıları, sınıflandırmalar veya ekran görüntüleri gibi o sırada mevcut olan kanıtlara referans verebilir. Bu sayfa, teslim edilen yükün, alındığının, onaylandığının veya alıcının yaptığı eylemin tam olarak ne olduğu konusunda bir sonuç çıkarmaz.
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
İlk Kez Tespit Edildi27.03.2026
IoC Extractionscanned 29.07.20260 wallet · 0 Telegram IoCs
Submitted URLhttps://facelees.cc/
Ad sunucularıns2.my-ndns.com
TLS Fingerprint
TLS Observationvalid from 12.04.2026scanned 23.04.2026
TLS SAN Domainswww.facelees.cc
Case ID
Sayfa başlığı
FACELESS CC - Login
TLS sertifikası
Valid transport encryption · Düzenleyen Let's Encrypt · valid for 45 days

Latest Classified Outcome 2026-08-09 02:52:42 UTC

Primary outcome Bilinmiyor reason: Probe Inconclusive 20% confidence
Attribution source: Current Http Probe
Evidence layers Availability: Unreachable Content: Unknown DNS: Resolved Registration: Active
Latest HTTP observation Bilinmiyor Probe Inconclusive 20% 2026-08-09 02:52:42 UTC
RDAP registration Etkin NICENIC INTERNATIONAL GROUP CO., LIMITED · IANA 3765 RDAP HTTP 200 source: Rdap Status Collector clientDeleteProhibitedclientTransferProhibited expires 2027-07-23 20:37:21 UTC checked 2026-08-05 18:57:16 UTC
Observed timeline last reachable: 2026-08-08 22:14:53 UTC
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Teknolojiler · 7 identified
PHP
Programming languages

Server-side scripting language designed for web development.

Yii
Bootstrap
UI frameworks

Popular CSS framework for responsive, mobile-first web development.

Nginx
Web servers Reverse proxies

High-performance HTTP server and reverse proxy, known for stability and low resource usage.

jQuery UI

Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.

jQuery
JavaScript libraries

Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.

Clipboard.js
Detected via Cloudflare Radar · Wappalyzer engine
Bu Alan Adını Bildir Kanıt sunun ve başkalarını korumaya yardımcı olun

VirusTotal Analizi

2 / 94 güvenlik sağlayıcıları bu alanı işaretledi
View on VT
Last analyzed
alphaMountain.ai
Forcepoint ThreatSeeker
Site Performans Analizi

Google PageSpeed Insights — mobile performance audit of facelees.cc · checked Mar 27, 2026

93
Good
Performance
FCP
1.68s
First Contentful Paint
LCP
2.33s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
15ms
Total Blocking Time
SI
5.27s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Kanıtlar ve Dış RaporlarIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.

Europol
AB ülkeniz için resmi raporlama kanalını bulun
National police directory
Kurtarma dolandırıcılarına dikkat edin! Suçlular, araştırmacı, avukat veya kurtarma görevlisi gibi davranarak mağdurlarla tekrar iletişime geçebilir. Peşin ücret ödemeyin veya kimlik bilgilerinizi paylaşmayın. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →

Yerel Yetkililere Bildirin

resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.

97 ülke rehberi
Yapay zeka destekli taslak — olay ayrıntıları yapay zeka sağlayıcısı tarafından işlenir Kendiniz inceleyin ve gönderin
Bu Raporu YerleştirRead-only HTML widget
HTML · IFRAME

Bu Raporu Yerleştir

Bu tehdit bilgisini web sitenizde veya blogunuzda paylaşın

embed.html
<iframe
  src="https://phishdestroy.io/tr/embed/domain/facelees.cc"
  title="PhishDestroy threat report for facelees.cc"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>