facelesscoin[.]com

This domain, facelesscoin.com, is flagged as a generic phishing site targeting cryptocurrency users. Analysis indicates it mimics a legitimate coin platform under the brand name 'FACELESS COIN,' likely designed to deceive victims into disclosing wallet credentials or transferring digital assets. No specific drainer kit signatures have been identified yet, but the infrastructure aligns with common phishing tactics used in crypto-related fraud schemes. The domain presents a clear risk of financial theft through social engineering and credential harvesting. Infrastructure analysis reveals the following technical indicators: the domain was registered on August 21, 2025, through GoDaddy.com, LLC and resolves to the IP address 64.29.17.1. VirusTotal detection remains at 0/95, indicating no antivirus engines have flagged it as malicious at the time of assessment. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100, reflecting high suspicion. Technologies detected include Vercel for hosting and HTTP Strict Transport Security (HSTS) enforcement, which may be leveraged to lend an appearance of legitimacy. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. As of the latest assessment, facelesscoin.com has been taken offline, mitigating immediate exposure to potential victims. The domain was blocked by at least one security provider, reducing its operational threat. However, residual risk persists due to the recent registration date and the possibility of infrastructure reactivation under a different domain or IP. Users who interacted with the site are advised to monitor their cryptocurrency wallets for unauthorized transactions and revoke any connected permissions. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.