optiekfreija[.]be

This domain, optiekfreija.be, has been identified as a brand impersonation phishing site targeting Facebook users. Analysis confirms the domain is designed to deceive visitors into believing they are interacting with legitimate Facebook infrastructure, thereby facilitating unauthorized credential harvesting. The domain is currently offline, though prior activity indicates a focused campaign against social media users. Infrastructure analysis reveals the domain resolves to the IP address 75.2.60.5 and was registered through Combell nv on December 07, 2006. Despite its long-standing registration, the domain has been flagged by 2 of 95 security vendors on VirusTotal, indicating limited but confirmed detection. It appears on two security blocklists and holds a Gridinsoft trust score of 0 out of 100, reflecting its malicious classification. The SSL certificate is issued by Let’s Encrypt, a common tactic to lend superficial legitimacy to phishing sites. Detected technologies include React, Gatsby, Netlify, HSTS, and Webpack, suggesting a modern, obfuscated deployment designed to evade basic detection mechanisms. The domain’s current offline status does not eliminate the risk of future reactivation or similar campaigns. Organizations and users are advised to block the domain and its associated IP address at the network level. Security teams should monitor for related infrastructure, particularly domains registered through the same registrar or resolving to the same IP range. End-users should be educated on recognizing brand impersonation tactics, particularly those mimicking social media platforms. If credentials were entered on this domain, immediate password resets and multi-factor authentication enforcement are strongly recommended.