support-team[.]business-minagne[.]com

PhishDestroy has identified the domain support-team.business-minagne.com as an elevated risk brand impersonation threat targeting Facebook users. This domain is specifically designed to deceive visitors into believing they are interacting with an official Facebook support team, likely to harvest login credentials through a fraudulent restrictions page. The page title, 'Retrictions Information,' is a deliberate misspelling that mimics Facebook's account restriction notifications, aiming to lure unsuspecting users into entering sensitive information.

Technical analysis reveals that this domain was created on July 09, 2024, and registered through Aceville Pte. Ltd., a registrar sometimes associated with malicious domains. The domain resolves to IP address 172.67.218.44, which is part of Cloudflare's network, providing an additional layer of anonymity. VirusTotal data shows that 16 out of 95 security vendors flagged this domain as malicious, indicating a moderate but significant detection rate. The domain currently uses an SSL certificate issued by Google Trust Services, which can give it a false sense of legitimacy. Furthermore, it appears on 2 security blocklists, confirming its malicious nature. The domain is now offline, but similar threats may arise.

To protect against such brand impersonation attacks, users should always verify the URL of any Facebook-related page, especially support or security notifications. Never enter credentials on sites reached via unsolicited emails or messages. Enable two-factor authentication on Facebook accounts and use a password manager to detect phishing sites automatically. If you have already entered information on this domain, change your Facebook password immediately and enable login alerts. Report any similar domains to Facebook and relevant cybersecurity authorities to help takedown efforts.