# PhishDestroy domain threat record: facebook-badge-center.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/facebook-badge-center.com/ Machine-readable companion: https://phishdestroy.io/domain/facebook-badge-center.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-26 00:29:23 UTC - Stored record updated: 2026-10-26 01:04:03 UTC - VirusTotal detections in the stored snapshot: 16/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: Facebook ## Stored infrastructure - Observed IP address: 216.198.79.65 - Registrar in stored WHOIS data: Name.com, Inc. - Registration date in stored WHOIS data: 2026-06-04 08:35:26 UTC ## Evidence links - URLScan report: https://urlscan.io/result/019ffe64-e04e-741a-8375-4d8350c7975d/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/facebook-badge-center.com - Certificate Transparency search: https://crt.sh/?q=%25.facebook-badge-center.com - Web Archive lookup: https://web.archive.org/web/*/https://facebook-badge-center.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added facebook-badge-center.com to its internal blocklist on 2026-10-26 after the intake flagged the domain because VirusTotal reported numerous malicious detections. When fetched on 2026-10-26 the site returned HTTP 451, indicating the content was unavailable at that time. How the scam works The vendor detections associated with this domain are typical of phishing or fraud campaigns that impersonate trusted brands to harvest credentials, but no specific malicious page content or credential‑collection form was observed in the available scans. Consequently, the listing reflects a general risk category rather than a confirmed on‑page behavior. Evidence VirusTotal analysis on 2026-10-21 (retrieved 2026-10-26) recorded 14 malicious and 2 suspicious detections out of 92 engines, with vendors such as BitDefender, ESET and Fortinet flagging the domain as phishing. Google Safe Browsing checked on 2026-10-26 did not flag the domain. URLScan captured the site on 2026-08-14 and reported an overall clean verdict, though its engine scoring marked it malicious with a score of 75. Cloudflare Radar scanned on 2026-10-26 labeled the domain malicious under the malware category, and OTX listed three pulses referencing it as of the same date. PhishDestroy’s internal blocklist marks the domain as blocked, while external blocklists showed no entries at the time of checking. Infrastructure The domain was registered with Name.com, Inc. on 2026-06-04 and uses Vercel DNS nameservers. Hosting records show IP addresses 216.198.79.65 (Amazon.com, Inc., US) and 64.29.17.1, both serving a TLS certificate from Let’s Encrypt valid from 2026-10-13 to 2027-01-11. The server header reports Vercel, and HSTS is enabled with a max‑age of two years; DNSSEC is not configured. What to do Do not enter any credentials, personal information, or download files from this domain; if you have already submitted credentials, change the associated passwords immediately. Security teams should block facebook-badge-center.com at the firewall or DNS level and monitor for any outbound connections to its recorded IPs. Continue to watch vendor feeds for updates, as the domain’s risk rating may evolve. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/019ffe64-e04e-741a-8375-4d8350c7975d/ Cloudflare Radar report: https://radar.cloudflare.com/scan/4b700100-40f7-4988-9665-6635aa7af726 Stored capture screenshot: https://urlscan.io/screenshots/019ffe64-e04e-741a-8375-4d8350c7975d.png Cloudflare Radar screenshot (2026-10-26T00:33:14Z): https://screenshots.phishdestroy.io/cf/4b700100-40f7-4988-9665-6635aa7af726.png URLScan screenshot (2026-08-07T01:17:06Z): https://screenshots.phishdestroy.io/us/019fd9cb-7dc1-743c-abb8-17d3598b73ff.png URLScan capture report: https://urlscan.io/result/019fd9cb-7dc1-743c-abb8-17d3598b73ff/ VirusTotal report: https://www.virustotal.com/gui/domain/facebook-badge-center.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=facebook-badge-center.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-26 01:03:50 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/019ffe64-e04e-741a-8375-4d8350c7975d.png Captured: 2026-10-26 00:29:23 UTC - URLScan capture: https://screenshots.phishdestroy.io/019ffe64-e04e-741a-8375-4d8350c7975d.png Source report: https://urlscan.io/result/019ffe64-e04e-741a-8375-4d8350c7975d/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/4b700100-40f7-4988-9665-6635aa7af726.png Captured: 2026-10-26 00:33:14 UTC Source report: https://radar.cloudflare.com/scan/4b700100-40f7-4988-9665-6635aa7af726 SHA-256: fedc78b8e1507412155fde6de9ee135835165cf40cc1415c3402f9f1b7801c21 - URLScan · 2026-08-07: https://screenshots.phishdestroy.io/us/019fd9cb-7dc1-743c-abb8-17d3598b73ff.png Captured: 2026-08-07 01:17:06 UTC Source report: https://urlscan.io/result/019fd9cb-7dc1-743c-abb8-17d3598b73ff/ SHA-256: c9e5b0345a21edda601ec8d51d6fd6e8df989a82530c052daf4ea0f35f2ced50 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-26T00:35:33Z", "uuid": "019ffe64-e04e-741a-8375-4d8350c7975d", "scanned_at": "2026-08-14T03:50:58Z", "final_url": "https://facebook-badge-center.com/live", "status": 451, "ip": "64.29.17.1", "ips": [ "64.29.17.1" ], "asns": [ "16509" ], "countries": [ "US" ], "doc_hash": "af5db186ec8654f5924f49c5713d54b37761bbe983136417c1634cf13f9e401d", "globals": [ "fence" ], "tls": { "san": [ "facebook-badge-center.com" ], "cipher": "AES_128_GCM", "issuer": "YR2", "subject": "facebook-badge-center.com", "protocol": "TLS 1.3", "valid_to": "2026-11-04T02:14:14Z", "valid_from": "2026-08-06T02:14:15Z" }, "domain_age_days": 70, "apex_age_days": 70, "tls_age_days": 8, "tls_valid_days": 89, "requests": 2, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 75, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" } }, "cf": { "v": 1, "fetched_at": "2026-10-26T00:35:35Z", "uuid": "4b700100-40f7-4988-9665-6635aa7af726", "scanned_at": "2026-10-26T00:33:14Z", "final_url": "https://facebook-badge-center.com/", "status": 451, "history": [ { "url": "https://facebook-badge-center.com/", "status": 451 } ], "dom_hash": "43cc15c7d4b1578d88aa62258b07172404f09ae234cba63ccd261df8ad1ec377", "doc_hash": "7b5868555c6adadc65129e18cb895e4d806d71b5c838cb6261f650c2d120a2b9", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "facebook-badge-center.com", "type": "A", "value": "64.29.17.65" }, { "name": "facebook-badge-center.com", "type": "A", "value": "64.29.17.1" } ], "dnssec_valid": false, "ip": "64.29.17.65", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "Name.com, Inc.", "created": "2026-06-04T10:35:26Z", "updated": "2026-06-04T10:35:26Z", "expires": "2027-06-04T10:35:26Z", "nameservers": [ "ns1.vercel-dns.com", "ns2.vercel-dns.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-26T01:02:23Z", "analysis_at": "2026-10-21T07:58:32Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 14, "suspicious": 2, "undetected": 32 }, "detections": { "DNS8": "suspicious", "ESET": "phishing", "VIPRE": "malware", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "Sophos": "phishing and fraud", "Webroot": "Phishing and Other Frauds", "alphaMountain.ai": "Phishing (alphaMountain.ai)", "Forcepoint ThreatSeeker": "phishing and other frauds" }, "registrar": "Name.com, Inc.", "created": "2026-06-04T10:35:26Z", "expires": "2027-06-04T10:35:26Z", "updated": "2026-06-04T10:35:26Z", "first_seen": "2026-06-04T11:26:01Z", "dns": [ { "ttl": 1800, "type": "A", "value": "216.198.79.1" }, { "ttl": 60, "type": "CAA", "value": "sectigo.com" }, { "ttl": 60, "type": "CAA", "value": "letsencrypt.org" }, { "ttl": 21600, "type": "NS", "value": "ns1.vercel-dns.com" }, { "ttl": 3600, "type": "SOA", "rname": "hostmaster.nsone.net", "value": "ns1.vercel-dns.com" }, { "ttl": 60, "type": "CAA", "value": "pki.goog" }, { "ttl": 21600, "type": "NS", "value": "ns2.vercel-dns.com" }, { "ttl": 1800, "type": "A", "value": "64.29.17.1" } ], "dns_at": "2026-10-21T08:04:01Z", "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb", "cert": { "san": [ "*.facebook-badge-center.com", "facebook-badge-center.com" ], "issuer": "Let's Encrypt / YR2", "serial": "633065204872b4011b06abe98fd53f7c8d4", "sha256": "93ce482da88524ce437c0f26cc62391980131f3c1b99a626a74d56b886bd3207", "subject": "*.facebook-badge-center.com", "valid_to": "2027-01-11T05:03:43Z", "valid_from": "2026-10-13T05:03:44Z" }, "whois": { "registrar": "Name.com, Inc.", "registrar_iana_id": "625", "registrar_url": "http://www.name.com", "created": "2026-06-04T10:35:26Z", "updated": "2026-06-04T10:35:26Z", "expires": "2027-06-04T10:35:26Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.vercel-dns.com", "ns2.vercel-dns.com" ], "dnssec": "unSigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-04T10:35:26Z", "last changed": "2026-06-04T10:35:26Z", "registration": "2026-06-04T10:35:26Z", "registrar expiration": "2027-06-04T10:35:26Z", "last update of RDAP database": "2026-06-04T10:35:26Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-26T00:35:43Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "count": 3, "domain": "facebook-badge-center.com", "issuers": [ "letsencrypt.org", "pki.goog", "sectigo.com" ] }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "dns_server": { "ns": [ { "ip": "198.51.45.13", "host": "ns2.vercel-dns.com" }, { "ip": "198.51.44.13", "host": "ns1.vercel-dns.com" } ], "zone": "facebook-badge-center.com" }, "location": { "ip": "216.198.79.1", "asn": "16509", "org": "Amazon.com, Inc.", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR2", "subject": "*.facebook-badge-center.com" }, "dns": { "A": [ "64.29.17.1", "216.198.79.1" ], "NS": [ "ns2.vercel-dns.com", "ns1.vercel-dns.com" ], "SOA": "{\"nsname\": \"ns1.vercel-dns.com\", \"hostmaster\": \"hostmaster.nsone.net\", \"serial\": 1780569328, \"refresh\": 43200, \"retry\": 7200, \"expire\": 1209600, \"minttl\": 600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=63072000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=63072000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "64.29.17.1", "family": 4 }, "whois": { "registrar": "Name.com, Inc.", "created": "2026-06-04T10:35:26Z", "updated": "2026-06-04T10:35:26Z", "expires": "2027-06-04T10:35:26Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.vercel-dns.com", "ns2.vercel-dns.com" ] }, "headers": { "headers": { "server": "Vercel", "content-type": "text/plain; charset=utf-8", "strict-transport-security": "max-age=63072000" } } } } ```