域安全和威胁情报

facebook-verified-center.com

Name: facebook-verified-center.com — PhishDestroy evidence record
Published: 2026-10-26
License: https://creativecommons.org/licenses/by/4.0/

简要

facebook-verified-center.com：冒充 Facebook，PhishDestroy 于 2026-10-26 检测到。风险：关键（95/100）。注册商：Name.com。托管：Amazon.com, Inc。VirusTotal：18/92 个引擎标记。请勿输入登录凭据，也不要连接钱包。

查看证据

注册商: Name.com
Resolved IP: 64.29.17.65
注册时间: 2026年6月19日

PhishDestroy评估关键

95/100

证据评分

首次观测 Oct 26, 2026 00:29 UTC · PhishDestroy

风险信号

病毒检测总数：18/92 自动品牌标签：Facebook

VirusTotal

18 / 92

发动机检测 · 2026-10-26

OTX

社区参考资料

Cloudflare Radar

—

未记录

页面快照

打开图库

域名年龄

128 days

已发送举报

—

无已发送记录

报告概览

冒充 Facebook: facebook-verified-center.com — 未验证. 证据摘要: VirusTotal 18/92 (alphaMountain.ai, BitDefender, CyRadar, DNS8, ESET); URLScan capture; PhishDestroy…

为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。

分析

PhishDestroy威胁报告2026-10-26 00:35:45 UTC

Overview

PhishDestroy classifies facebook-verified-center.com as a suspicious domain based on multiple security‑vendor detections. The domain was first seen by PhishDestroy on 2026-10-26 when a page fetch returned HTTP 451 and no page title was recorded. The intake reason cited fourteen malicious detections on VirusTotal.

How the scam works

The listed detections correspond to a generic phishing pattern where attackers register look‑alike domains and present minimal or error pages to lure users into submitting credentials or personal data. No specific credential‑harvesting form or malicious payload was observed on this site.

证据

VirusTotal analysis on 2026-10-21 (retrieved 2026-10-26) reported 14 malicious and 4 suspicious detections out of 92 engines, totaling 18 detections. Google Safe Browsing checked on 2026-10-26 did not flag the domain, while urlscan.io captured the site on 2026-10-03 and gave an overall clean verdict but its engine score marked it malicious (score 58). Cloudflare Radar on 2026-10-26 labeled the domain malicious and tagged it as phishing, and OTX listed two pulses referencing the domain as of the same date. PhishDestroy’s internal blocklist contains the domain; external blocklists showed no matches on the check date.

基础设施

The domain was registered with Name.com on 2026-06-19 and was 105 days old at the time of observation. DNS records resolve to 64.29.17.65 (Amazon.com, Inc.) and 216.198.79.1 (Vercel), and the TLS certificate issued by Let’s Encrypt / YR1 was valid from 2026-08-19 to 2026-11-17. The server header reported Vercel and DNSSEC was not enabled.

What to do

Visitors should not enter Facebook credentials or personal information on this site; if they have already done so, they should change passwords immediately and enable two‑factor authentication. Security teams should block facebook-verified-center.com at DNS or proxy level and monitor for connections to the recorded IP addresses. Treat any credential submissions to this domain as potentially compromised.

来源证据VirusTotal 18 / 92 · OTX 2 references 7 sources

VirusTotal

18 / 92 发动机检测 · 存储的摘要

2026-10-26 00:31 UTC

打开报告

VirusTotal来源原始记录观测时间: 2026-10-21 07:57:52 UTC14 个字段

观测时间: 2026-10-21T07:57:52Z · 检索到: 2026-10-26T00:31:57Z

供应商结果计数

超时: 0
无害: 43
恶意: 14
可疑的: 4
未检测到: 31

供应商标签

DNS8: suspicious
ESET: suspicious
VIPRE: phishing
G-Data: phishing
Lionic: phishing
Sophos: phishing
CyRadar: phishing
Webroot: malicious
Fortinet: phishing
SOCRadar: phishing
卡巴斯基: phishing
LevelBlue: suspicious
Seclookup: malicious
Gridinsoft: suspicious
SafeToOpen: phishing
BitDefender: phishing
alphaMountain.ai: phishing
Forcepoint ThreatSeeker: phishing

信誉评分

注册商

Name.com, Inc.

创建

2026-06-19 16:10:56 UTC

有效期至

2027-06-19 16:10:56 UTC

已更新

2026-06-19 16:10:57 UTC

首次发现

2026-06-19 16:46:24 UTC

DNS 记录

TTL（秒）
60
类型
CAA
值
sectigo.com
TTL（秒）
1800
类型
A
值
216.198.79.65
TTL（秒）
21600
类型
NS
值
ns1.vercel-dns.com
TTL（秒）
60
类型
CAA
值
pki.goog
TTL（秒）
1800
类型
A
值
216.198.79.1
TTL（秒）
21600
类型
NS
值
ns2.vercel-dns.com
TTL（秒）
3600
类型
SOA
负责人邮箱
hostmaster.nsone.net
值
ns1.vercel-dns.com
TTL（秒）
60
类型
CAA
值
letsencrypt.org

DNS 记录获取时间

2026-10-21 08:03:16 UTC

JARM 指纹

3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb

证书

使用者备用名称（SAN）: *.facebook-verified-center.com
facebook-verified-center.com
签发者: Let's Encrypt / YR1
序列号: 55187a9f83abdebbb002d08cabd2df919b5
SHA-256: 75f6173a942d03e51c72953dc2fb949a4e5eea2c27a0d615997d7ba284a857cc
使用者（Subject）: *.facebook-verified-center.com
到期时间: 2026-11-17 11:28:34 UTC
生效时间: 2026-08-19 11:28:35 UTC

注册记录

注册商: Name.com, Inc.
注册商 IANA ID: 625
注册商 URL: http://www.name.com
注册时间: 2026-06-19 16:10:56 UTC
已更新: 2026-06-19 16:10:57 UTC
有效期至: 2027-06-19 16:10:56 UTC
状态: clientTransferProhibited
域名服务器: ns1.vercel-dns.com
ns2.vercel-dns.com
DNSSEC: unSigned

注册局数据（RDAP）

状态

transfer prohibited

注册局事件

注册到期: 2027-06-19 16:10:56 UTC
最后更改: 2026-06-19 16:10:57 UTC
注册信息: 2026-06-19 16:10:56 UTC
注册商处到期: 2027-06-19 16:10:56 UTC
RDAP 数据库最近更新: 2026-06-19 16:10:57 UTC

来源原始字段 · JSON

供应商结果计数	{ "timeout": 0, "harmless": 43, "malicious": 14, "suspicious": 4, "undetected": 31 }
供应商标签	{ "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Kaspersky": "phishing", "LevelBlue": "suspicious", "Seclookup": "malicious", "Gridinsoft": "suspicious", "SafeToOpen": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }
声誉	0
注册商	Name.com, Inc.
创建	2026-06-19T16:10:56Z
有效期至	2027-06-19T16:10:56Z
已更新	2026-06-19T16:10:57Z
首次发现	2026-06-19T16:46:24Z
DNS 记录	[ { "ttl": 60, "type": "CAA", "value": "sectigo.com" }, { "ttl": 1800, "type": "A", "value": "216.198.79.65" }, { "ttl": 21600, "type": "NS", "value": "ns1.vercel-dns.com" }, { "ttl": 60, "type": "CAA", "value": "pki.goog" }, { "ttl": 1800, "type": "A", "value": "216.198.79.1" }, { "ttl": 21600, "type": "NS", "value": "ns2.vercel-dns.com" }, { "ttl": 3600, "type": "SOA", "rname": "hostmaster.nsone.net", "value": "ns1.vercel-dns.com" }, { "ttl": 60, "type": "CAA", "value": "letsencrypt.org" } ]
Dns at	2026-10-21T08:03:16Z
Jarm	3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb
证书	{ "san": [ ".facebook-verified-center.com", "facebook-verified-center.com" ], "issuer": "Let's Encrypt / YR1", "serial": "55187a9f83abdebbb002d08cabd2df919b5", "sha256": "75f6173a942d03e51c72953dc2fb949a4e5eea2c27a0d615997d7ba284a857cc", "subject": ".facebook-verified-center.com", "valid_to": "2026-11-17T11:28:34Z", "valid_from": "2026-08-19T11:28:35Z" }
注册记录	{ "registrar": "Name.com, Inc.", "registrar_iana_id": "625", "registrar_url": "http://www.name.com", "created": "2026-06-19T16:10:56Z", "updated": "2026-06-19T16:10:57Z", "expires": "2027-06-19T16:10:56Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.vercel-dns.com", "ns2.vercel-dns.com" ], "dnssec": "unSigned" }
注册表数据	{ "status": [ "transfer prohibited" ], "events": { "expiration": "2027-06-19T16:10:56Z", "last changed": "2026-06-19T16:10:57Z", "registration": "2026-06-19T16:10:56Z", "registrar expiration": "2027-06-19T16:10:56Z", "last update of RDAP database": "2026-06-19T16:10:57Z" } }

单独的源记录 · 14 malicious + 4 suspicious / 92 · 2026-10-21 07:57:52 UTC

上述摘要和此服务提供商记录是在不同时间收集的。两者均仍可查阅；恶意和可疑的分类结果分别显示。

record_source: collected_observations.vt
analysis_at: 2026-10-21T07:57:52Z
fetched_at: 2026-10-26T00:31:57Z
stats: {"timeout":0,"harmless":43,"malicious":14,"suspicious":4,"undetected":31}

URLScan

恶意 · 引擎判定 · 评分 58

2026-10-03 06:58 UTC

打开报告

URLScan来源原始记录观测时间: 2026-10-03 06:58:24 UTC16 个字段

观测时间: 2026-10-03T06:58:24Z · 检索到: 2026-10-26T00:34:59Z

报告 ID

01a1008e-7386-70ca-94b0-dc775aaffb26

最终网址

https://facebook-verified-center.com/

HTTP 响应

451

IP 地址

64.29.17.1

已联系的 IP 地址

64.29.17.1

自治系统（ASN）

16509

服务器所在国家/地区

文档哈希值

cdf98256414538a871208e7649a1106a3eb317a757e235290f68c093ac346a86

TLS 会话与证书

使用者备用名称（SAN）: *.facebook-verified-center.com
facebook-verified-center.com
加密套件: AES_128_GCM
签发者: YR1
使用者（Subject）: *.facebook-verified-center.com
协议: TLS 1.3
到期时间: 2026-11-17 11:28:34 UTC
生效时间: 2026-08-19 11:28:35 UTC

域名年龄（天）

105

注册域名年龄（天）

105

证书年龄（天）

证书有效期（天）

页面请求数

服务提供商评定结果

引擎判定

标签: urlscan-ml
urlscan-ml-60c5e22
评分: 58
恶意: 是

总体判定

评分: 0
恶意: 否

HTTP 头

服务器: Vercel
Content-type: text/html; charset=utf-8
Strict-transport-security: max-age=63072000

来源原始字段 · JSON

Uuid	01a1008e-7386-70ca-94b0-dc775aaffb26
Final url	https://facebook-verified-center.com/
状态	451
Ip	64.29.17.1
已联系的 IP 地址	[ "64.29.17.1" ]
Asns	[ "16509" ]
Countries	[ "US" ]
文档哈希值	cdf98256414538a871208e7649a1106a3eb317a757e235290f68c093ac346a86
Tls	{ "san": [ ".facebook-verified-center.com", "facebook-verified-center.com" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": ".facebook-verified-center.com", "protocol": "TLS 1.3", "valid_to": "2026-11-17T11:28:34Z", "valid_from": "2026-08-19T11:28:35Z" }
域名年龄（天）	105
Apex age days	105
Tls age days	44
TLS 有效天数	89
请求	2
服务提供商评定结果	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 58, "malicious": true }, "overall": { "score": 0, "malicious": false } }
HTTP 头	{ "server": "Vercel", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=63072000" }

单独的监视器记录 · 日期未记录

单独存储的监控快照；不会替换主报告记录，也不会确定当前的可用性。

record_source: domain_monitor.urlscan
uuid: 01a1008e-7386-70ca-94b0-dc775aaffb26
report_url: https://urlscan.io/result/01a1008e-7386-70ca-94b0-dc775aaffb26/
评分: null
malicious: null
result_at: null
enriched_at: null
source_timestamps: {"urlscan_result_at":null,"urlscan_enriched_at":null}
timestamp_basis: Europe/Berlin，与现有报告中使用的格式一致；源时间戳按原样保留

OTX

2 community references

2026-10-26 00:33 UTC

打开报告

Cloudflare Radar

扫描报告

未记录

打开报告

Cloudflare Radar来源原始记录观测时间: 2026-10-26 00:33:14 UTC13 个字段

观测时间: 2026-10-26T00:33:14Z · 检索到: 2026-10-26T00:35:03Z

报告 ID

e2afb633-950f-4dfc-a827-41d8e2104c49

最终网址

https://facebook-verified-center.com/

HTTP 响应

451

跳转记录

URL
https://facebook-verified-center.com/
状态
451

DOM 结构哈希

43cc15c7d4b1578d88aa62258b07172404f09ae234cba63ccd261df8ad1ec377

文档哈希值

b443ccb71edd522602bddc5e0e32392b834d33254721f6b0e9da9a4eba2221a3

域名风险类别

网络钓鱼
Security threats
CIPA Filter
CIPA