# facebook-support.center — MALICIOUS

> WARNING: facebook-support.center impersonates Facebook to deploy a crypto drainer. 16/95 security vendors flag this domain—verify on PhishDestroy before.

## Summary
PhishDestroy has identified an active brand impersonation domain, facebook-support.center, designed to deliver a crypto drainer under the guise of Facebook support.

This domain poses an elevated risk by masquerading as official Facebook assistance. It was registered on March 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to the IP address 212.11.64.207. Security analysis shows this domain is flagged by 16 of 95 VirusTotal vendors, indicating widespread recognition as malicious.

If you accessed this domain or entered credentials, cease all transactions immediately and revoke any connected account permissions. Run a full antivirus scan and change passwords using a separate, trusted device. Report the domain to PhishDestroy for further analysis and blocklist updates to protect other users.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Facebook

## Domain Intelligence
- Registered: 2026-03-15 10:49:56
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 212.11.64.207

## Detection Status
- VirusTotal: 16 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e94ac887-f9e3-4500-a5eb-a4d600800e93
- PhishDestroy: https://phishdestroy.io/domain/facebook-support.center/
- LLM endpoint: https://phishdestroy.io/domain/facebook-support.center/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/facebook-support.center/
Last updated: 2026-03-23