static[.]f-acebo0k[.]com

This domain, static.f-acebo0k.com, is identified as a credential phishing infrastructure specifically designed to impersonate Facebook login pages. Analysis indicates the site employs brand impersonation techniques, presenting a near-identical replica of Facebook's authentication interface with the page title 'Facebook - log in or sign up.' No associated drainer kit or secondary payload delivery was observed in initial scans, though the infrastructure aligns with common credential harvesting tactics used in social media phishing campaigns. Infrastructure analysis reveals the domain was registered on November 24, 2025, through Name.com, Inc., and resolves to the IP address 34.230.4.94, hosted on Amazon Web Services (AS14618) in the United States. The domain currently lacks an SSL certificate, increasing its detectability by security controls. Detection metrics show 21 out of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on two independent security blocklists. No entries were found in Google Safe Browsing at the time of analysis, suggesting either recent activation or evasion of that specific detection mechanism. The domain has since been taken offline, likely in response to security vendor flagging or hosting provider intervention. However, the registration remains active, posing a residual risk of reactivation or migration to alternative infrastructure. Organizations and individuals are advised to monitor for related domains using the seed 'f-acebo0k' or similar typosquatting patterns, and to implement DNS-based blocking for the observed IP address 34.230.4.94. Users who may have interacted with the site should initiate password resets and enable multi-factor authentication on their Facebook accounts as a precautionary measure.