# PhishDestroy domain threat record: facebook-verified-center.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/facebook-verified-center.com/
Machine-readable companion: https://phishdestroy.io/domain/facebook-verified-center.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: unknown
- First observed by PhishDestroy: 2026-10-26 00:29:39 UTC
- Stored record updated: 2026-10-26 01:00:11 UTC
- VirusTotal detections in the stored snapshot: 18/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Facebook

## Stored infrastructure

- Observed IP address: 64.29.17.65
- Registrar in stored WHOIS data: Name.com, Inc.
- Registration date in stored WHOIS data: 2026-06-19 14:10:56 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1008e-7386-70ca-94b0-dc775aaffb26/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/facebook-verified-center.com
- Certificate Transparency search: https://crt.sh/?q=%25.facebook-verified-center.com
- Web Archive lookup: https://web.archive.org/web/*/https://facebook-verified-center.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy classifies facebook-verified-center.com as a suspicious domain based on multiple security‑vendor detections. The domain was first seen by PhishDestroy on 2026-10-26 when a page fetch returned HTTP 451 and no page title was recorded. The intake reason cited fourteen malicious detections on VirusTotal.

How the scam works
The listed detections correspond to a generic phishing pattern where attackers register look‑alike domains and present minimal or error pages to lure users into submitting credentials or personal data. No specific credential‑harvesting form or malicious payload was observed on this site.

Evidence
VirusTotal analysis on 2026-10-21 (retrieved 2026-10-26) reported 14 malicious and 4 suspicious detections out of 92 engines, totaling 18 detections. Google Safe Browsing checked on 2026-10-26 did not flag the domain, while urlscan.io captured the site on 2026-10-03 and gave an overall clean verdict but its engine score marked it malicious (score 58). Cloudflare Radar on 2026-10-26 labeled the domain malicious and tagged it as phishing, and OTX listed two pulses referencing the domain as of the same date. PhishDestroy’s internal blocklist contains the domain; external blocklists showed no matches on the check date.

Infrastructure
The domain was registered with Name.com on 2026-06-19 and was 105 days old at the time of observation. DNS records resolve to 64.29.17.65 (Amazon.com, Inc.) and 216.198.79.1 (Vercel), and the TLS certificate issued by Let’s Encrypt / YR1 was valid from 2026-08-19 to 2026-11-17. The server header reported Vercel and DNSSEC was not enabled.

What to do
Visitors should not enter Facebook credentials or personal information on this site; if they have already done so, they should change passwords immediately and enable two‑factor authentication. Security teams should block facebook-verified-center.com at DNS or proxy level and monitor for connections to the recorded IP addresses. Treat any credential submissions to this domain as potentially compromised.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a1008e-7386-70ca-94b0-dc775aaffb26/
Cloudflare Radar report: https://radar.cloudflare.com/scan/e2afb633-950f-4dfc-a827-41d8e2104c49
Stored capture screenshot: https://urlscan.io/screenshots/01a1008e-7386-70ca-94b0-dc775aaffb26.png
Cloudflare Radar screenshot (2026-10-26T00:33:14Z): https://screenshots.phishdestroy.io/cf/e2afb633-950f-4dfc-a827-41d8e2104c49.png
URLScan screenshot (2026-08-03T01:25:01Z): https://screenshots.phishdestroy.io/us/019fc539-4cf2-7233-aba3-100c6209ea46.png
URLScan capture report: https://urlscan.io/result/019fc539-4cf2-7233-aba3-100c6209ea46/
URLScan screenshot (2026-08-27T07:51:09Z): https://screenshots.phishdestroy.io/us/01a04233-73c1-708f-95e0-5d0786e074b5.png
URLScan capture report: https://urlscan.io/result/01a04233-73c1-708f-95e0-5d0786e074b5/
URLScan screenshot (2026-08-30T12:21:31Z): https://screenshots.phishdestroy.io/us/01a0529e-0d6f-77cd-b9e1-3031f768fcb4.png
URLScan capture report: https://urlscan.io/result/01a0529e-0d6f-77cd-b9e1-3031f768fcb4/
URLScan screenshot (2026-08-31T10:19:27Z): https://screenshots.phishdestroy.io/us/01a05754-abde-762c-b141-8931f02df30e.png
URLScan capture report: https://urlscan.io/result/01a05754-abde-762c-b141-8931f02df30e/
URLScan screenshot (2026-09-04T18:08:22Z): https://screenshots.phishdestroy.io/us/01a06d9b-664e-733f-b6b6-35e455e1e810.png
URLScan capture report: https://urlscan.io/result/01a06d9b-664e-733f-b6b6-35e455e1e810/
URLScan screenshot (2026-09-08T06:03:10Z): https://screenshots.phishdestroy.io/us/01a07f9c-e7a9-77ba-a60f-ecdd7b7f351b.png
URLScan capture report: https://urlscan.io/result/01a07f9c-e7a9-77ba-a60f-ecdd7b7f351b/
VirusTotal report: https://www.virustotal.com/gui/domain/facebook-verified-center.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=facebook-verified-center.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 00:35:45 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a1008e-7386-70ca-94b0-dc775aaffb26.png
  Captured: 2026-10-26 00:29:39 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a1008e-7386-70ca-94b0-dc775aaffb26.png
  Source report: https://urlscan.io/result/01a1008e-7386-70ca-94b0-dc775aaffb26/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/e2afb633-950f-4dfc-a827-41d8e2104c49.png
  Captured: 2026-10-26 00:33:14 UTC
  Source report: https://radar.cloudflare.com/scan/e2afb633-950f-4dfc-a827-41d8e2104c49
  SHA-256: 8d01b0de2cd9d7634902a31585dce4e7ea1ed392a53025a8a39d37ef7aba3664
- URLScan · 2026-08-03: https://screenshots.phishdestroy.io/us/019fc539-4cf2-7233-aba3-100c6209ea46.png
  Captured: 2026-08-03 01:25:01 UTC
  Source report: https://urlscan.io/result/019fc539-4cf2-7233-aba3-100c6209ea46/
  SHA-256: e107918c05faeb4c199df222964f099d6b09c34baff512042dc1981b7e75d2c3
- URLScan · 2026-08-27: https://screenshots.phishdestroy.io/us/01a04233-73c1-708f-95e0-5d0786e074b5.png
  Captured: 2026-08-27 07:51:09 UTC
  Source report: https://urlscan.io/result/01a04233-73c1-708f-95e0-5d0786e074b5/
  SHA-256: 3503003f4f9ccd4f7a15b9f3b2111d2f220214709a1d882c53f8ee5dba0da89c
- URLScan · 2026-08-30: https://screenshots.phishdestroy.io/us/01a0529e-0d6f-77cd-b9e1-3031f768fcb4.png
  Captured: 2026-08-30 12:21:31 UTC
  Source report: https://urlscan.io/result/01a0529e-0d6f-77cd-b9e1-3031f768fcb4/
  SHA-256: 6b3b27f9254e9bdefc38cc539552332e2533394f29dea891e0de76f6b56b6d37
- URLScan · 2026-08-31: https://screenshots.phishdestroy.io/us/01a05754-abde-762c-b141-8931f02df30e.png
  Captured: 2026-08-31 10:19:27 UTC
  Source report: https://urlscan.io/result/01a05754-abde-762c-b141-8931f02df30e/
  SHA-256: b56a75e4bca24ca3eead716f4aa61ededf292d419383dde7438ebb5f54ffdfb1
- URLScan · 2026-09-04: https://screenshots.phishdestroy.io/us/01a06d9b-664e-733f-b6b6-35e455e1e810.png
  Captured: 2026-09-04 18:08:22 UTC
  Source report: https://urlscan.io/result/01a06d9b-664e-733f-b6b6-35e455e1e810/
  SHA-256: dbd20a3d851f9fd2ba07f4252e50885744799f7d470236b80735fea6c656c6b6
- URLScan · 2026-09-08: https://screenshots.phishdestroy.io/us/01a07f9c-e7a9-77ba-a60f-ecdd7b7f351b.png
  Captured: 2026-09-08 06:03:10 UTC
  Source report: https://urlscan.io/result/01a07f9c-e7a9-77ba-a60f-ecdd7b7f351b/
  SHA-256: 3377821e0d680e6ab9b50e2cc4360b8cf4b3c661036ee75b8962a694c51be726

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T00:34:59Z",
        "uuid": "01a1008e-7386-70ca-94b0-dc775aaffb26",
        "scanned_at": "2026-10-03T06:58:24Z",
        "final_url": "https://facebook-verified-center.com/",
        "status": 451,
        "ip": "64.29.17.1",
        "ips": [
            "64.29.17.1"
        ],
        "asns": [
            "16509"
        ],
        "countries": [
            "US"
        ],
        "doc_hash": "cdf98256414538a871208e7649a1106a3eb317a757e235290f68c093ac346a86",
        "tls": {
            "san": [
                "*.facebook-verified-center.com",
                "facebook-verified-center.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YR1",
            "subject": "*.facebook-verified-center.com",
            "protocol": "TLS 1.3",
            "valid_to": "2026-11-17T11:28:34Z",
            "valid_from": "2026-08-19T11:28:35Z"
        },
        "domain_age_days": 105,
        "apex_age_days": 105,
        "tls_age_days": 44,
        "tls_valid_days": 89,
        "requests": 2,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 58,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Vercel",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=63072000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-26T00:35:03Z",
        "uuid": "e2afb633-950f-4dfc-a827-41d8e2104c49",
        "scanned_at": "2026-10-26T00:33:14Z",
        "final_url": "https://facebook-verified-center.com/",
        "status": 451,
        "history": [
            {
                "url": "https://facebook-verified-center.com/",
                "status": 451
            }
        ],
        "dom_hash": "43cc15c7d4b1578d88aa62258b07172404f09ae234cba63ccd261df8ad1ec377",
        "doc_hash": "b443ccb71edd522602bddc5e0e32392b834d33254721f6b0e9da9a4eba2221a3",
        "domain_risks": [
            "Phishing",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "facebook-verified-center.com",
                "type": "A",
                "value": "216.198.79.1"
            },
            {
                "name": "facebook-verified-center.com",
                "type": "A",
                "value": "64.29.17.65"
            }
        ],
        "dnssec_valid": false,
        "ip": "216.198.79.1",
        "verdict": {
            "tags": [
                "phishing"
            ],
            "malicious": true,
            "categories": [
                "phishing"
            ]
        },
        "whois": {
            "registrar": "Name.com, Inc.",
            "created": "2026-06-19T16:10:56Z",
            "updated": "2026-06-19T16:10:57Z",
            "expires": "2027-06-19T16:10:56Z",
            "nameservers": [
                "ns1.vercel-dns.com",
                "ns2.vercel-dns.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T00:31:57Z",
        "analysis_at": "2026-10-21T07:57:52Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 14,
            "suspicious": 4,
            "undetected": 31
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "LevelBlue": "suspicious",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "SafeToOpen": "phishing",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "registrar": "Name.com, Inc.",
        "created": "2026-06-19T16:10:56Z",
        "expires": "2027-06-19T16:10:56Z",
        "updated": "2026-06-19T16:10:57Z",
        "first_seen": "2026-06-19T16:46:24Z",
        "dns": [
            {
                "ttl": 60,
                "type": "CAA",
                "value": "sectigo.com"
            },
            {
                "ttl": 1800,
                "type": "A",
                "value": "216.198.79.65"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns1.vercel-dns.com"
            },
            {
                "ttl": 60,
                "type": "CAA",
                "value": "pki.goog"
            },
            {
                "ttl": 1800,
                "type": "A",
                "value": "216.198.79.1"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "ns2.vercel-dns.com"
            },
            {
                "ttl": 3600,
                "type": "SOA",
                "rname": "hostmaster.nsone.net",
                "value": "ns1.vercel-dns.com"
            },
            {
                "ttl": 60,
                "type": "CAA",
                "value": "letsencrypt.org"
            }
        ],
        "dns_at": "2026-10-21T08:03:16Z",
        "jarm": "3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb",
        "cert": {
            "san": [
                "*.facebook-verified-center.com",
                "facebook-verified-center.com"
            ],
            "issuer": "Let's Encrypt / YR1",
            "serial": "55187a9f83abdebbb002d08cabd2df919b5",
            "sha256": "75f6173a942d03e51c72953dc2fb949a4e5eea2c27a0d615997d7ba284a857cc",
            "subject": "*.facebook-verified-center.com",
            "valid_to": "2026-11-17T11:28:34Z",
            "valid_from": "2026-08-19T11:28:35Z"
        },
        "whois": {
            "registrar": "Name.com, Inc.",
            "registrar_iana_id": "625",
            "registrar_url": "http://www.name.com",
            "created": "2026-06-19T16:10:56Z",
            "updated": "2026-06-19T16:10:57Z",
            "expires": "2027-06-19T16:10:56Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "ns1.vercel-dns.com",
                "ns2.vercel-dns.com"
            ],
            "dnssec": "unSigned"
        },
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-06-19T16:10:56Z",
                "last changed": "2026-06-19T16:10:57Z",
                "registration": "2026-06-19T16:10:56Z",
                "registrar expiration": "2027-06-19T16:10:56Z",
                "last update of RDAP database": "2026-06-19T16:10:57Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T00:35:11Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "count": 3,
            "domain": "facebook-verified-center.com",
            "issuers": [
                "pki.goog",
                "sectigo.com",
                "letsencrypt.org"
            ]
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "198.51.45.13",
                    "host": "ns2.vercel-dns.com"
                },
                {
                    "ip": "198.51.44.13",
                    "host": "ns1.vercel-dns.com"
                }
            ],
            "zone": "facebook-verified-center.com"
        },
        "location": {
            "ip": "64.29.17.1",
            "asn": "16509",
            "org": "Amazon.com, Inc.",
            "city": "Los Angeles",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR1",
            "subject": "*.facebook-verified-center.com"
        },
        "dns": {
            "A": [
                "64.29.17.1",
                "216.198.79.1"
            ],
            "NS": [
                "ns1.vercel-dns.com",
                "ns2.vercel-dns.com"
            ],
            "SOA": "{\"nsname\": \"ns1.vercel-dns.com\", \"hostmaster\": \"hostmaster.nsone.net\", \"serial\": 1781885458, \"refresh\": 43200, \"retry\": 7200, \"expire\": 1209600, \"minttl\": 600}"
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=63072000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=63072000",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "64.29.17.1",
            "family": 4
        },
        "whois": {
            "registrar": "Name.com, Inc.",
            "created": "2026-06-19T16:10:56Z",
            "updated": "2026-06-19T16:10:57Z",
            "expires": "2027-06-19T16:10:56Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "ns1.vercel-dns.com",
                "ns2.vercel-dns.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "Vercel",
                "content-type": "text/plain; charset=utf-8",
                "strict-transport-security": "max-age=63072000"
            }
        }
    }
}
```