collectiblemarkethub[.]com

This domain, collectiblemarkethub.com, is actively impersonating Facebook's marketplace functionality, as indicated by its explicit branding target and page title 'Collectible Market Hub: NFT Marketplace for Minting and Trading.' Registered on July 30, 2024, through NameCheap, Inc., the domain resolves to IP 141.95.34.93 (AS16276, OVH SAS, Germany) and is currently returning HTTP 200 responses. Infrastructure analysis reveals Cloudflare nameservers (jeff.ns.cloudflare.com, melina.ns.cloudflare.com) and a Let's Encrypt SSL certificate (R13). Five of 95 security vendors on VirusTotal flag the domain, while it appears on three security blocklists and is referenced in 23 AlienVault OTX threat intelligence pulses. The domain's Gridinsoft trust score is 0/100, and it is explicitly blocked by PhishDestroy, Enkrypt, and BLP-Malware. Technologies detected include PHP, Nginx, Bootstrap, particles.js, SweetAlert2, Slick, and jsDelivr, suggesting a dynamic web application designed for user interaction. MX records point to _dc-mx.759a50b3a4d2.collectiblemarkethub.com with priority 10, which may indicate email capabilities for credential harvesting or follow-up phishing attempts. The domain's creation date (less than two years old) and active status further support its use in ongoing social media scams. Defenders should treat this domain as high-risk. Immediate actions include blocking the domain, IP 141.95.34.93, and associated MX records at the network perimeter. Monitoring for connections to this IP or domain from internal assets is recommended, along with reviewing logs for any prior interactions. Given the domain's association with Cloudflare, additional scrutiny of other domains sharing the same nameservers may uncover related malicious infrastructure. The exact content and functionality of the site remain unanalyzed; however, the combination of brand impersonation, detected technologies, and threat intelligence signals warrants proactive containment.