ffjutsudvhd[.]atanskmn[.]web[.]id

The domain ffjutsudvhd.atanskmn.web.id is identified as a brand impersonation threat specifically targeting Facebook. Analysis indicates the site was designed to deceive users into believing it was affiliated with the legitimate Facebook platform, likely for credential harvesting or fraudulent activity. The domain is currently offline, but prior activity warrants scrutiny. Infrastructure analysis reveals the domain was created on February 21, 2026, and registered through PT Cloud Hosting Indonesia. It resolves to the IP address 172.67.164.141, hosted on Cloudflare infrastructure (AS13335). Security vendors flagged the domain in 18 of 95 VirusTotal scans, and it appears on one security blocklist. The page title, "Garena Free Fire. Game genre Battle Royale mobile terbaik!" suggests an attempt to lure users with gaming-related content, a common tactic in social media impersonation schemes. No SSL certificate was detected, further indicating a lack of legitimate security measures. The domain has been taken offline, but organizations and users should remain vigilant. Network defenders are advised to block the domain and its associated IP address in perimeter security controls. Users who may have interacted with the site should reset credentials for any accounts accessed during the potential exposure window. Monitoring for similar domains registered through the same registrar or resolving to the same IP range is recommended to preemptively mitigate related threats.