artemonten[.]top

This domain, artemonten.top, is flagged for brand_impersonation targeting Facebook. Analysis confirms it is currently offline, though prior activity involved presenting a page titled 'Facebook' to deceive users into disclosing credentials or sensitive information. The domain was operational until recently, with infrastructure analysis revealing active impersonation attempts. Infrastructure analysis reveals the domain was registered through NameSilo, LLC, on July 22, 2025, and resolved to IP address 172.67.174.49, hosted on Cloudflare’s network (AS13335). It was flagged by 18 of 95 security vendors on VirusTotal, indicating widespread detection. Additionally, the domain appears on two security blocklists and lacks an SSL certificate, further reducing its legitimacy. No legitimate association with the targeted brand was identified. The domain is now offline, but its prior activity warrants caution. Organizations should ensure this domain and its associated IP (172.67.174.49) are blocked at the network level. Security teams are advised to monitor for related domains registered through the same registrar or resolving to identical infrastructure. End-users should be educated on recognizing brand_impersonation tactics, particularly those mimicking login pages of high-value platforms.