964-iq-conttact[.]ubpages[.]com

The domain 964-iq-conttact.ubpages.com has been identified as a high-risk phishing site specializing in brand impersonation, specifically targeting Facebook users. The page title displayed to visitors is 'Facebook,' mimicking the legitimate platform to deceive users into disclosing credentials or other sensitive information. As of the latest assessment, this domain is currently offline, though prior activity remains a documented threat. Analysis indicates this domain was flagged by 24 of 95 security vendors on VirusTotal, demonstrating a significant detection rate. Registered through NameCheap, Inc. on December 14, 2015, the domain resolves to the IP address 172.64.146.119, hosted on infrastructure associated with AS13335 (Cloudflare, Inc.). It appears on one security blocklist and is explicitly flagged for phishing by Google Safe Browsing. The SSL certificate is issued by Let's Encrypt, a common practice among malicious actors to lend superficial legitimacy to fraudulent sites. Current infrastructure status shows the domain as taken offline, reducing immediate risk of active exploitation. However, historical data and detection metrics suggest prior malicious intent. Organizations and users are advised to block the domain and associated IP address (172.64.146.119) at the network perimeter. Security teams should monitor for any resurgence of activity under similar subdomains or newly registered lookalike domains. End-users should be educated on recognizing brand impersonation tactics, particularly those involving social media platforms, and encouraged to verify URLs before entering credentials.