ammucare[.]org

The domain ammucare.org is a confirmed phishing site engaged in brand impersonation targeting Facebook users. It presents itself as a legitimate Facebook login portal to deceive victims into entering credentials, though no crypto drainer kit is present. As of the latest verification, ammucare.org has been taken offline.

Technical indicators confirm ammucare.org as a malicious domain. It is flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered through NameSilo, LLC on December 07, 2003, and resolves to the IP address 139.99.150.21, hosted by OVH SAS in Australia. The SSL certificate is issued by Let's Encrypt (R13), and the observed page title is 'Page Not Found - Ammucare Charitable Trust'. Despite its long registration history, the domain's Gridinsoft trust score is 0/100, and it is detected using technologies such as WordPress, PHP, and Cloudflare.

Victims of ammucare.org should immediately change any passwords entered on the site, particularly for Facebook accounts, and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or messages sent without consent. Report the phishing domain to Facebook's abuse team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.