shendun360[.]com

shendun360.com was registered on February 21, 2026 through the registrar Spaceship, Inc. The domain resolves to IP 64.29.17.65, which belongs to Amazon.com, Inc. (AS16509) located in the United States. DNS is hosted on Vercel’s nameservers ns1.vercel-dns.com and ns2.vercel-dns.com. The site presents a page title of “神盾360 - Facebook广告智能监控平台”, indicating an explicit reference to Facebook advertising monitoring. The infrastructure uses modern web stacks including Node.js, React, Next.js, Webpack and is served behind Vercel’s platform, with HTTP Strict Transport Security enabled.

TLS is provided by a Let’s Encrypt R12 certificate, and the server returns an HTTP 308 permanent redirect status. Threat intelligence flags the domain as a high‑risk, active brand‑impersonation campaign targeting Facebook users. One of ninety‑three VirusTotal scanners identified the domain as malicious, and the domain appears on a single security blocklist. PhishDestroy has already added it to its block list, and the Gridinsoft trust score is 0/100, reinforcing the malicious classification.

No additional public detections or sandbox analyses are currently available, leaving the exact phishing page content unknown. Defenders should add 64.29.17.65 and shendun360.com to URL filtering and DNS sinkhole lists, monitor for outbound connections to the Vercel infrastructure, and enforce strict email and web gateway policies that block any references to the observed page title or the Facebook brand when paired with this domain. Continuous re‑scan with VirusTotal or other multi‑engine services is recommended to capture any changes in detection status. Given the recent registration date and the active status, rapid remediation is advised to prevent credential harvesting attempts against Facebook users.