lonkake[.]cfd

This domain, lonkake.cfd, poses a direct threat to users by impersonating the Messenger platform to harvest login credentials. Visitors are presented with a fraudulent login interface designed to mimic the legitimate service, tricking them into entering sensitive account details. The stolen credentials can be used for unauthorized account access, identity theft, or further social engineering attacks against contacts in the victim's network. Analysis indicates this infrastructure is actively malicious. The domain was registered on June 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Security vendors on VirusTotal flag this domain at a rate of 12 out of 95, demonstrating substantial detection despite its recent creation. The site resolves to the IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. If you visited lonkake.cfd or entered any information on the site, immediate action is required. First, change the passwords for your Messenger account and any other services where the same credentials may have been reused. Enable multi-factor authentication on all critical accounts to prevent unauthorized access. Monitor your accounts for unusual activity, such as unrecognized logins or messages sent without your knowledge. Consider running a full security scan on your device to check for malware or tracking software that may have been installed. Report the incident to your organization's security team or a trusted cybersecurity professional for further guidance.