aman[.]pawarbuildcon[.]com

This domain, aman.pawarbuildcon.com, carries an elevated risk level due to its confirmed brand impersonation of Facebook. The site attempts to deceive users by mimicking the social media giant's branding, likely to harvest credentials or spread malware. Such impersonation campaigns are particularly dangerous because they exploit trust in well-known platforms, often leading to account compromise or data theft.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports a detection rate of 14 out of 95 security vendors flagging this domain, placing it firmly in the suspicious category. It is registered through PDR Ltd. d/b/a PublicDomainRegistry.com and was created on November 26, 2022. The domain resolves to IP address 148.113.35.66, lacks an SSL certificate, and appears on 2 security blocklists. Its page title, "My Blog – My WordPress Blog," is generic and inconsistent with a legitimate Facebook service, further suggesting a phishing setup.

To mitigate the threat, users should avoid visiting the domain or clicking any links associated with it. If credentials were entered on this site, immediate password changes for the affected accounts and enabling two-factor authentication on Facebook are critical. Security teams should add the domain to blocklists and monitor for any related subdomains or variations. PhishDestroy recommends reporting the domain to Facebook's abuse team and to domain registrars for takedown.