cnvalores[.]icu

This domain, cnvalores.icu, poses a significant threat as it impersonates Facebook, a well-known brand. The site is designed to trick users into believing they are interacting with a legitimate Facebook service, which can lead to the theft of personal information, login credentials, and other sensitive data. The risk level is elevated, and users should avoid visiting this domain.

Analysis indicates that cnvalores.icu has been flagged by 18 out of 95 security vendors on VirusTotal, a substantial number that suggests the domain is likely malicious. The domain was created on June 03, 2026, and is registered through Gname.com Pte. Ltd. Additionally, the domain resolves to an IP address (185.236.228.43) located in the Netherlands, which is associated with AS47674 Net Solutions - Consultoria Em Tecnologias De Informacao, Sociedade Unipessoal LDA. The SSL certificate is issued by Let's Encrypt, which is commonly used by both legitimate and malicious sites, but the presence of this certificate does not guarantee safety.

If a user has visited cnvalores.icu, they should immediately check their Facebook account for any unauthorized activity. It is recommended to change login credentials and enable two-factor authentication (2FA) for added security. Users should also monitor their email and financial accounts for any signs of compromise. Reporting the incident to Facebook's security team and a trusted cybersecurity professional can help mitigate potential damage.