faecbook[.]vn

This domain, faecbook.vn, is identified as a brand impersonation phishing site targeting Facebook users. The page displays a fraudulent Vietnamese New Year promotion titled 'KHAI XUÂN 2026 - NHẬN LÌ XÌ MAY MẮM 🧧 Dành tặng học sinh 2K8-2K9-2K10,' designed to deceive users into entering credentials or personal information under the guise of a legitimate giveaway. The campaign specifically targets students born between 2008 and 2010, exploiting cultural events to increase engagement and trust. Analysis indicates the domain was registered on February 24, 2026, and resolves to the IP address 103.75.187.184, hosted on AS135905 (VIETNAM POSTS AND TELECOMMUNICATIONS GROUP). It is flagged by 17 out of 95 security vendors on VirusTotal, and appears on two security blocklists. The domain uses a Let's Encrypt SSL certificate (serial number E8), which, while providing encryption, does not validate legitimacy. Infrastructure analysis reveals the domain is part of a broader pattern of brand impersonation targeting Vietnamese-speaking users. Users who visited faecbook.vn should immediately revoke any entered credentials, particularly Facebook login details. Monitor accounts for unauthorized activity, enable multi-factor authentication, and report the incident to their organization’s security team or relevant authorities. If financial information was submitted, contact banking institutions to prevent fraudulent transactions. The domain is currently offline, but similar campaigns may reappear under different domains or IPs.