facebooklogin12732771[.]github[.]io

This domain, facebooklogin12732771.github.io, poses as a legitimate Facebook login portal to steal user credentials. Attackers use brand impersonation techniques to trick visitors into entering their account details, which are then harvested for unauthorized access, account takeover, or further malicious activities such as spreading malware or conducting financial fraud. The site is designed to closely resemble Facebook’s official interface, making it difficult for users to distinguish between the legitimate and fraudulent pages. Analysis indicates this domain was registered on April 09, 2026, through GitHub, Inc., and currently resolves to the IP address 185.199.108.153. It is flagged by 14 out of 95 security vendors on VirusTotal, and appears on two security blocklists: PhishDestroy and PhishingDB. The SSL certificate is issued by Let’s Encrypt, which, while encrypting traffic, does not validate the legitimacy of the site. The page title, 'Site not found · GitHub Pages,' suggests an attempt to disguise the malicious intent under a seemingly inactive or benign appearance. If you or someone you know has visited facebooklogin12732771.github.io and entered login credentials, immediate action is required. First, change the password for the affected Facebook account and enable multi-factor authentication if not already active. Review the account for any unauthorized activity, such as unfamiliar posts, messages, or connected applications. Additionally, scan the device used to access the site for malware, as credential theft sites often deploy additional payloads. Report the incident to the platform’s security team and consider notifying contacts who may have been targeted by follow-up attacks originating from the compromised account.