inspectionradar[.]com

This domain is flagged for elevated-risk brand impersonation activity specifically targeting Facebook credentials. Analysis indicates the infrastructure was designed to deceive users into disclosing authentication details through a fabricated login interface, as evidenced by the page title 'inspection' and confirmed brand impersonation classification. Infrastructure analysis reveals the domain inspectionradar.com was registered on September 6, 2025, through GoDaddy.com, LLC and resolves to IP address 192.185.129.84, hosted on AS46606 (Unified Layer) in the United States. The domain lacks SSL encryption and has been flagged by 19 out of 95 security vendors on VirusTotal. It appears on two distinct security blocklists and was previously blocked by multiple threat intelligence platforms. Detection rates and absence of legitimate certificates indicate a high probability of malicious intent. Organizations and users should implement immediate mitigation measures to counter this credential harvesting threat. Network administrators are advised to block the domain and its resolving IP (192.185.129.84) at the perimeter firewall level. Endpoint protection systems should be updated to include this domain in real-time phishing detection rules. Users who may have interacted with the domain should reset Facebook credentials from a secure device and enable multi-factor authentication. Security teams should monitor for unauthorized access attempts linked to this campaign, particularly focusing on accounts that may have been exposed during the domain's active period.