# PhishDestroy domain threat record: m-faceboooks.com.vn

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/m-faceboooks.com.vn/
Machine-readable companion: https://phishdestroy.io/domain/m-faceboooks.com.vn/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-22 13:02:10 UTC
- Last availability or vendor check: 2026-10-22 13:02:10 UTC
- Stored record updated: 2026-10-22 19:16:52 UTC
- VirusTotal detections in the stored snapshot: 20/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Facebook

## Stored infrastructure

- Observed IP address: 188.114.97.3
- Registrar in stored WHOIS data: REGISTRAR_NOT_FOUND
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2025-10-01 22:00:00 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a163b3-0934-7306-9b0d-8f000819daa5/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/m-faceboooks.com.vn
- Certificate Transparency search: https://crt.sh/?q=%25.m-faceboooks.com.vn
- Web Archive lookup: https://web.archive.org/web/*/https://m-faceboooks.com.vn/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy’s automated assessment classifies m-faceboooks.com.vn as an impersonation phishing page. The domain was first seen by PhishDestroy on 2026-10-22. An HTTP 200 response was recorded on that date and the page performed a client‑side redirect to facebook.com.

How the scam works
Impersonation phishing sites copy the look and language of a legitimate service—in this case Facebook—to trick users into entering their login credentials. Harvested credentials can be used for account takeover or sold on underground markets.

Evidence
VirusTotal scanned the domain on 2026-10-22 and reported 20 detections across 92 engines, with 18 classified as malicious and 2 as suspicious. Google Safe Browsing checked the same day and did not flag the site. urlscan.io captured the page on 2026-10-22 and returned a malicious verdict, labeling it as phishing targeting Facebook/Meta. Spamhaus DBL listed the domain as phishing on 2026-10-22, and OTX recorded five pulses referencing it. PhishDestroy’s internal blocklist also contains the domain as of 2026-10-22.

Infrastructure
The recorded IP address was 188.114.97.3, which was associated with the CloudFLARENET‑EU network in Great Britain on the observation date. TLS was provided by Google Trust Services, valid until 2026-12-21 and covering m-faceboooks.com.vn and its wildcard subdomains. DNS was served by Cloudflare without DNSSEC, and the site ran behind Cloudflare’s WAF using technologies identified as Bunny, Cloudflare and HTTP/3.

What to do
Visitors should avoid entering any Facebook credentials on the site; if credentials were entered, change the Facebook password immediately and enable two‑factor authentication. Organizations should block the domain and monitor network logs for connections to the recorded IP address. Security teams can add the domain to their phishing blocklists and review alerts from the listed security vendors.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a163b3-0934-7306-9b0d-8f000819daa5/
Cloudflare Radar report: https://radar.cloudflare.com/scan/6b2cd1c4-629f-4e53-8ad2-44067215565f
Stored capture screenshot: https://i.ibb.co/35qNzV1y/e79b262f6b82.png
Cloudflare Radar screenshot (2026-10-22T13:36:40Z): https://screenshots.phishdestroy.io/cf/6b2cd1c4-629f-4e53-8ad2-44067215565f.png
URLScan screenshot (2026-08-14T01:02:14Z): https://screenshots.phishdestroy.io/us/019ffdca-6580-73d8-b1b4-16b578612eb1.png
URLScan capture report: https://urlscan.io/result/019ffdca-6580-73d8-b1b4-16b578612eb1/
URLScan screenshot (2026-10-11T08:02:37Z): https://screenshots.phishdestroy.io/us/01a129fc-1cda-777d-b5c9-00a216c85f04.png
URLScan capture report: https://urlscan.io/result/01a129fc-1cda-777d-b5c9-00a216c85f04/
URLScan screenshot (2026-10-14T13:41:33Z): https://screenshots.phishdestroy.io/us/01a13a80-9cb4-765f-91e8-518a5a8b61f9.png
URLScan capture report: https://urlscan.io/result/01a13a80-9cb4-765f-91e8-518a5a8b61f9/
URLScan screenshot (2026-10-16T01:04:56Z): https://screenshots.phishdestroy.io/us/01a1423d-8022-751d-a67b-c5db6348ef5a.png
URLScan capture report: https://urlscan.io/result/01a1423d-8022-751d-a67b-c5db6348ef5a/
URLScan screenshot (2026-10-18T01:31:18Z): https://screenshots.phishdestroy.io/us/01a14ca1-d317-703a-986b-aec54c8d41bb.png
URLScan capture report: https://urlscan.io/result/01a14ca1-d317-703a-986b-aec54c8d41bb/
URLScan screenshot (2026-10-22T13:12:32Z): https://screenshots.phishdestroy.io/us/01a163bd-cf8e-7029-8cac-42ef9c0efcbf.png
URLScan capture report: https://urlscan.io/result/01a163bd-cf8e-7029-8cac-42ef9c0efcbf/
VirusTotal report: https://www.virustotal.com/gui/domain/m-faceboooks.com.vn
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=m-faceboooks.com.vn
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-22 19:16:47 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/35qNzV1y/e79b262f6b82.png
  Captured: 2026-10-22 13:02:10 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a163b3-0934-7306-9b0d-8f000819daa5.png
  Captured: 2026-10-22 13:02:10 UTC
  Source report: https://urlscan.io/result/01a163b3-0934-7306-9b0d-8f000819daa5/
- URLScan capture 2: https://urlscan.io/screenshots/01a16300-8232-737a-8c07-1d8ff5415feb.png
  Captured: 2026-10-22 12:58:14 UTC
  Source report: https://urlscan.io/result/01a163b3-0934-7306-9b0d-8f000819daa5/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/6b2cd1c4-629f-4e53-8ad2-44067215565f.png
  Captured: 2026-10-22 13:36:40 UTC
  Source report: https://radar.cloudflare.com/scan/6b2cd1c4-629f-4e53-8ad2-44067215565f
  SHA-256: 5b685b6fd0c356b8389e33596a40c60d2f63ca6aac5f9ec6250f109105361924
- URLScan · 2026-08-14: https://screenshots.phishdestroy.io/us/019ffdca-6580-73d8-b1b4-16b578612eb1.png
  Captured: 2026-08-14 01:02:14 UTC
  Source report: https://urlscan.io/result/019ffdca-6580-73d8-b1b4-16b578612eb1/
  SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599
- URLScan · 2026-10-11: https://screenshots.phishdestroy.io/us/01a129fc-1cda-777d-b5c9-00a216c85f04.png
  Captured: 2026-10-11 08:02:37 UTC
  Source report: https://urlscan.io/result/01a129fc-1cda-777d-b5c9-00a216c85f04/
  SHA-256: 8759b033899b75d8998ea7852e9871fd0ccbc4ec42e282e4bf24b7cc82e213c2
- URLScan · 2026-10-14: https://screenshots.phishdestroy.io/us/01a13a80-9cb4-765f-91e8-518a5a8b61f9.png
  Captured: 2026-10-14 13:41:33 UTC
  Source report: https://urlscan.io/result/01a13a80-9cb4-765f-91e8-518a5a8b61f9/
  SHA-256: 0e8cc482508273889a0bf32dcd63ca018c41fb75a038170e9789bfd4791a4485
- URLScan · 2026-10-16: https://screenshots.phishdestroy.io/us/01a1423d-8022-751d-a67b-c5db6348ef5a.png
  Captured: 2026-10-16 01:04:56 UTC
  Source report: https://urlscan.io/result/01a1423d-8022-751d-a67b-c5db6348ef5a/
  SHA-256: d0700d10f60c1c49c139955646c7a113b3b128db7d8b6c6aa04c48cf588b7cbc
- URLScan · 2026-10-18: https://screenshots.phishdestroy.io/us/01a14ca1-d317-703a-986b-aec54c8d41bb.png
  Captured: 2026-10-18 01:31:18 UTC
  Source report: https://urlscan.io/result/01a14ca1-d317-703a-986b-aec54c8d41bb/
  SHA-256: 8441e33c50cc87f098f6a9cbeeac2068fe141dda7022bc667703dc593a7d4415
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163bd-cf8e-7029-8cac-42ef9c0efcbf.png
  Captured: 2026-10-22 13:12:32 UTC
  Source report: https://urlscan.io/result/01a163bd-cf8e-7029-8cac-42ef9c0efcbf/
  SHA-256: df3ce695eeda95f111b61246eece94247a44e1cee863fd5d0198a9abfe6c9599

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-22T13:03:29Z",
        "uuid": "01a163b3-0934-7306-9b0d-8f000819daa5",
        "scanned_at": "2026-10-22T13:00:48Z",
        "final_url": "https://m-faceboooks.com.vn/92hbtiovsof",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://m-faceboooks.com.vn/92hbtiovsof",
                "from": "http://m-faceboooks.com.vn/92hbtiovsof",
                "status": 307
            }
        ],
        "ip": "172.67.163.140",
        "domains": [
            "gaingonvn.site",
            "ka-p.fontawesome.com",
            "cdnjs.cloudflare.com",
            "ws-ap3.pusher.com",
            "kit.fontawesome.com"
        ],
        "ips": [
            "172.67.223.91",
            "104.18.40.68",
            "104.17.24.14",
            "172.67.163.140"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "c81dd73a6022f02f8f1a77b0c8b805edc787e5536e0212a79c4e36916378ceec",
        "globals": [
            "$",
            "jQuery",
            "Pusher",
            "phone_check",
            "string_check",
            "check_email",
            "isValidVnPhone",
            "isValidUSPhone",
            "pusher",
            "channel"
        ],
        "cookies": [
            "XSRF-TOKEN",
            "viewserver-session"
        ],
        "storage_keys": [
            "pusherTransportTLS"
        ],
        "tls": {
            "san": [
                "m-faceboooks.com.vn",
                "*.m-faceboooks.com.vn"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "m-faceboooks.com.vn",
            "protocol": "QUIC",
            "valid_to": "2026-12-21T10:21:24Z",
            "valid_from": "2026-09-22T09:21:27Z"
        },
        "domain_age_days": 385,
        "apex_age_days": 385,
        "tls_age_days": 30,
        "tls_valid_days": 90,
        "requests": 19,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 98,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "facebook",
                    "meta"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Facebook",
                    "Meta"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=utf-8"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-22T13:39:26Z",
        "uuid": "6b2cd1c4-629f-4e53-8ad2-44067215565f",
        "scanned_at": "2026-10-22T13:36:40Z",
        "final_url": "https://m-faceboooks.com.vn/",
        "status": 200,
        "history": [
            {
                "url": "https://m-faceboooks.com.vn/",
                "status": 200
            }
        ],
        "dom_hash": "a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e",
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "m-faceboooks.com.vn",
                "type": "A",
                "value": "188.114.96.0"
            },
            {
                "name": "m-faceboooks.com.vn",
                "type": "A",
                "value": "188.114.97.0"
            },
            {
                "name": "m-faceboooks.com.vn",
                "type": "AAAA",
                "value": "2a06:98c1:3121::"
            },
            {
                "name": "m-faceboooks.com.vn",
                "type": "AAAA",
                "value": "2a06:98c1:3120::"
            }
        ],
        "dnssec_valid": false,
        "ip": "188.114.96.0"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-22T19:15:38Z",
        "analysis_at": "2026-10-22T13:21:54Z",
        "stats": {
            "timeout": 0,
            "harmless": 43,
            "malicious": 18,
            "suspicious": 2,
            "undetected": 29
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "CyRadar": "phishing",
            "Webroot": "malicious",
            "Emsisoft": "phishing",
            "Fortinet": "phishing",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "URLQuery": "malicious",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "phishing",
            "BitDefender": "phishing",
            "alphaMountain.ai": "phishing",
            "Google Safe Browsing": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "created": "2025-10-02T00:00:00Z",
        "first_seen": "2025-10-02T08:43:14Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "vicky.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:a38c"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.163.140"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=RbkqxDbFH333ubmdOsJ-0PvEzhEWUa1ivE-Nekqk5dQ"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:22ae"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "macy.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.34.174"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "macy.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-22T13:22:16Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "m-faceboooks.com.vn",
                "*.m-faceboooks.com.vn"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "473ff47e2d6709ff13f4cde1a2ca7c82",
            "sha256": "9f36a191269c4c2ecde957c93eba31354c9a791fac7df2359ea4b95eb80a7777",
            "subject": "m-faceboooks.com.vn",
            "valid_to": "2026-12-21T10:21:24Z",
            "valid_from": "2026-09-22T09:21:27Z"
        },
        "whois": []
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-22T13:39:47Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "m-faceboooks.com.vn"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-22T12:59:44Z",
            "first": "2026-10-22T12:59:44Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 1424
        },
        "robots_txt": {
            "agents": [
                "facebookexternalhit",
                "Facebot"
            ],
            "present": true
        },
        "security_txt": {
            "present": true,
            "found_in": "/security.txt"
        },
        "trackers": {
            "requests": 1
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 2,
                "tls": 21,
                "wait": 622,
                "connect": 9,
                "download": 0
            },
            "response_ms": 654
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.194.78",
                    "host": "macy.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.35.69",
                    "host": "vicky.ns.cloudflare.com"
                }
            ],
            "zone": "m-faceboooks.com.vn"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "XSRF-TOKEN",
                    "secure": true,
                    "same_site": "Lax"
                },
                {
                    "name": "viewserver-session",
                    "secure": true,
                    "http_only": true,
                    "same_site": "Lax"
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3121::9",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "m-faceboooks.com.vn"
        },
        "dns": {
            "A": [
                "188.114.97.9",
                "188.114.96.9"
            ],
            "NS": [
                "vicky.ns.cloudflare.com",
                "macy.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"macy.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418139866, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=RbkqxDbFH333ubmdOsJ-0PvEzhEWUa1ivE-Nekqk5dQ"
            ],
            "AAAA": [
                "2a06:98c1:3121::9",
                "2a06:98c1:3120::9"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::9",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://m-faceboooks.com.vn"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Bunny",
                "Cloudflare",
                "HTTP/3"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=utf-8"
            }
        }
    }
}
```