login[.]facebo0k[.]legal-lead-hub[.]com

This domain is flagged as a high-risk credential harvesting site specifically targeting Facebook users through brand impersonation. The page mimics the legitimate Facebook login interface, presenting the exact page title 'Facebook - Log In or Sign Up' to deceive users into submitting their account credentials. Analysis indicates the domain is designed to capture usernames, passwords, and potentially two-factor authentication codes, enabling unauthorized account access and subsequent malicious activities such as financial fraud or further phishing campaigns. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain login.facebo0k.legal-lead-hub.com was registered on March 08, 2026, through Cloudflare, Inc., and resolves to the IP address 185.107.74.34, located in Sweden under AS200430 (WEBO LLC). It appears on one security blocklist and is flagged by Google Safe Browsing as phishing. VirusTotal detection shows 23 out of 95 security vendors marking this domain as malicious, with no SSL certificate present, leaving data transmissions unencrypted and vulnerable to interception. Users who visited login.facebo0k.legal-lead-hub.com should immediately assume their credentials were compromised. The first action is to change the password for their Facebook account using a secure device and enable multi-factor authentication if not already active. Monitor the account for unauthorized posts, messages, or linked applications, and review recent login activity for unfamiliar locations or devices. Additionally, scan the device used to access the domain for malware, as phishing sites often deploy malicious scripts or redirect to exploit kits. If financial information was entered, contact relevant institutions to secure accounts and monitor for fraudulent transactions.