vaccine-assignment-missions-howard[.]trycloudflare[.]com

Analysis of the domain vaccine-assignment-missions-howard.trycloudflare.com indicates an elevated-risk brand impersonation campaign targeting Facebook users. The domain, registered through Cloudflare, Inc. on July 7, 2018, resolves to IP 104.16.230.132 (AS13335, Cloudflare, Inc., US) and uses nameservers kevin.ns.cloudflare.com and marjory.ns.cloudflare.com. No SSL certificate was detected.

The page title, 'Facebook – log in or sign up,' aligns with the identified scam type of social media phishing, explicitly impersonating Facebook as confirmed by threat intelligence sources. As of July 23, 2026, the domain appears on one security blocklist and is flagged by 19 of 93 security vendors on VirusTotal, indicating moderate detection coverage. The domain is currently offline, though its infrastructure remains registered under Cloudflare.

Defenders should treat this domain as a confirmed phishing endpoint due to its alignment with Facebook's branding, absence of legitimate SSL, and detection by multiple security vendors. No evidence suggests the use of a phishing kit or additional infrastructure beyond the listed IP and nameservers. Further monitoring is advised to track potential reactivation or shifts to alternate domains using similar naming patterns.