freijasoptiek[.]be

Analysis of freijasoptiek.be, a domain created on February 25, 2018 and registered through Combell nv, shows multiple indicators of malicious activity targeting Facebook users. The domain resolves to the IP address 75.2.60.5, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. An HTTPS connection is available using a Let’s Encrypt/E7 certificate, and the site delivers HTTP status 200, indicating that the server is actively responding to requests. Infrastructure fingerprints reveal the use of modern web‑stack components such as React, Gatsby, Netlify, Webpack, and the presence of HTTP Strict Transport Security (HSTS), all of which are consistent with a functional web application rather than a dormant placeholder.

The site’s page title, "Contact | Freija's Optiek," does not reference the impersonated brand, but the supplied intelligence classifies the operation as a social‑media phishing campaign that impersonates Facebook. Two of ninety‑five security vendors on VirusTotal have flagged the domain, and both PhishDestroy and ScamSniffer have listed it on their blocklists, confirming that external monitoring services consider it malicious. Gridinsoft’s trust score of 0 out of 100 further reinforces the low reputation of the host.

While the visible content of the page has not been examined, the combination of an active server, a valid TLS certificate, and confirmed vendor detections suggests a deliberate effort to lure victims into credential harvesting. Defenders should block DNS resolution for freijasoptiek.be, add the associated IP 75.2.60.5 to network deny lists, and monitor outbound traffic for connections to the domain or its hosting provider. Users should be warned that any unsolicited request appearing to originate from Facebook that redirects to this domain is likely fraudulent, and organizations should reinforce phishing awareness training to mitigate credential compromise.