m-facebookk[.]com[.]vn

The domain m-facebookk.com.vn has been identified as a high-risk phishing resource specializing in brand impersonation, specifically targeting Facebook. Analysis confirms the domain is currently offline, though prior activity involved presenting fraudulent content under the guise of legitimate Facebook services. The page title, "300 CÂU HỎI LÝ THUYẾT TRỌNG TÂM ÔN TẬP HOÁ HỮU CƠ 🔴 CÓ LIVE CHỮA CHI TIẾT," suggests an attempt to lure users with deceptive educational or live-streaming content, a common tactic to harvest credentials or distribute malware. Infrastructure analysis reveals the domain resolved to the IP address 103.75.186.54, associated with AS135905 (VIETNAM POSTS AND TELECOMMUNICATIONS GROUP). The domain is flagged by 20 of 95 security vendors on VirusTotal, indicating widespread detection across multiple threat intelligence platforms. It appears on four security blocklists, including PhishDestroy, OpenPhish, Phishunt, and PhishingDB, and is explicitly labeled as phishing by Google Safe Browsing. The SSL certificate is issued by Let's Encrypt (serial number E7), a detail often exploited by threat actors to lend a false sense of legitimacy to malicious sites. The registrar details, while not explicitly provided, align with patterns observed in domains registered for short-term phishing campaigns. As of the latest assessment, m-facebookk.com.vn has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. Organizations and end-users are advised to treat any prior interaction with this domain as a potential security incident. Network administrators should block the IP address 103.75.186.54 and monitor for related indicators of compromise, such as unusual login attempts or unauthorized access to Facebook accounts. Users who may have engaged with the domain should immediately reset credentials for Facebook and any associated services, enable multi-factor authentication, and scan their systems for malware. Proactive monitoring of similar domains, particularly those using brand names with slight misspellings or additional characters, is recommended to mitigate future risks.