flextropic[.]com

The domain flextropic.com was a short-lived phishing site engaged in brand impersonation targeting Facebook users. It presented itself as a legitimate Facebook-related service but instead harvested login credentials from victims. No crypto drainer kit was identified. The site has since been taken offline, though it remains a documented threat for historical reference.

Technical indicators confirm flextropic.com as a low-reputation domain. At detection, 2 of 95 VirusTotal security vendors flagged the domain, including CRDF and Gridinsoft, which assigned a trust score of 1/100. The domain was registered on 2024-10-09 13:13:14 through HOSTINGER operations, UAB, and resolved to IP address 92.113.28.68, hosted in France under AS47583. It appeared on one security blocklist (PhishDestroy) and had no SSL certificate. The observed page title was 'FLEXTROPIC - Home', and the HTTP status returned was 429. Google Safe Browsing did not flag the domain at the time of analysis.

Victims of flextropic.com should immediately change their Facebook passwords and enable two-factor authentication to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized posts or messages sent on their behalf. Report the phishing domain to Facebook’s abuse team via their official reporting channels and to local cybercrime authorities if applicable. Organizations may also submit the domain to threat intelligence platforms like URLScan or PhishTank for broader awareness.