google2025app[.]youtufb[.]be

The domain google2025app.youtufb.be was identified as a brand impersonation threat specifically targeting Facebook. Currently offline, this domain was created on June 09, 2016, and registered through Instra Corporation Pty Ltd. It resolves to IP address 13.248.207.112 and uses an SSL certificate issued by Google Trust Services (WE1). The page title was "品牌短網址 (符合NCC簡訊新規)｜PicSee短網址", suggesting a link-shortening service that may have been abused for phishing.

Analysis from VirusTotal shows that 11 out of 95 security vendors flagged this domain as malicious. It appears on one security blocklist, indicating moderate detection. Despite being offline, the domain's history of impersonating Facebook raises concerns about potential misuse for credential harvesting or spreading malware. The use of a legitimate-looking short URL service adds to the deceptive nature of the threat.

PhishDestroy recommends that users avoid visiting this domain or any associated links. If you have already interacted with the site, change your Facebook password immediately and enable two-factor authentication. Organizations should add this domain to their blocklists and educate employees about phishing tactics that exploit trusted brand names. Continuous monitoring for similar domains is advised to prevent future attacks.