facebook-acccounts-verification[.]github[.]io

PhishDestroy identifies the active domain facebook-acccounts-verification.github.io as a known brand impersonation site targeting Facebook users. The domain is currently operational and is designed to deceive visitors into disclosing sensitive credentials under the guise of account verification services. This constitutes an elevated risk due to its direct impersonation of a globally recognized brand, increasing the likelihood of successful social engineering attacks.

This domain was flagged by 7 of 95 VirusTotal vendors and is listed on Google Safe Browsing under the SOCIAL_ENGINEERING category. It resolves to IP address 185.199.108.153 and is registered through GitHub, Inc., the hosting provider. The domain’s SSL certificate is issued by Let’s Encrypt, which does not inherently validate the legitimacy of the site’s content or intent. These combined factors contribute to a high-risk profile for credential theft and account compromise.

PhishDestroy assesses this domain as an active threat requiring immediate action. Users should avoid interacting with any links or content associated with facebook-acccounts-verification.github.io and report the domain to relevant authorities such as Google Safe Browsing, VirusTotal, and Facebook’s Trust and Safety team. Organizations should implement network-level blocking of the domain and IP address to prevent accidental exposure. Security teams are advised to conduct user awareness training to highlight the risks of brand impersonation scams and to deploy endpoint protection measures capable of detecting and blocking access to malicious domains.