multi-servis[.]business-minagne[.]com

This domain is flagged as an elevated-risk brand impersonation threat targeting Facebook users. Analysis indicates the site was designed to deceive victims into entering credentials by presenting a fraudulent login interface under the guise of account restrictions, as suggested by the page title 'Retrictions Information.' Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain, registered on July 09, 2024, through Aceville Pte. Ltd., resolves to IP 172.67.218.44 (AS13335, Cloudflare, Inc., US). It appears on two security blocklists (PhishDestroy, PhishingDB) and is flagged by 17 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Google Trust Services (WE1), a common pattern in phishing campaigns leveraging legitimate certificate authorities to appear trustworthy. Mitigation steps for this specific threat type include immediate blocking of the domain and associated IP at the network perimeter. Organizations should monitor for credential submission attempts to this domain in web proxy logs and conduct internal phishing awareness training emphasizing Facebook impersonation tactics. End users who may have interacted with the site should be instructed to reset their credentials via official channels and enable multi-factor authentication. Given the domain's current offline status, continuous monitoring for re-emergence or similar infrastructure is recommended, particularly under the same registrar or hosting provider.