facebook.earnwithsocial.com
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Opis facebook.earnwithsocial.com
The domain facebook.earnwithsocial.com appears to present itself as a Facebook login page, using Facebook branding, layout, and links associated with Meta properties. The screenshot shows a sign-in form for email/mobile number and password, along with familiar Facebook-style navigation and footer elements, suggesting that the page is designed to resemble the official social media platform.
Based on the domain structure, this page does not appear to be hosted on Facebook's official primary domain. Instead, it is a subdomain of earnwithsocial.com, which may indicate that it is operated by an unrelated third party rather than by Meta Platforms. The combination of a Facebook-branded title, cloned interface, and non-official host strongly suggests the page may be intended to capture user credentials or imitate the legitimate service.
Ocena bezpieczeństwa facebook.earnwithsocial.com
Multiple web-classification providers categorize this domain as phishing or fraud-related, and 23 out of 91 security engines flagged it at the time of this scan. The domain also closely imitates Facebook by placing the brand name in a subdomain while serving a login page that visually resembles the official service. That kind of naming pattern may mislead visitors into believing they are on a legitimate Facebook-owned property when they are not.
Although the malware scan did not detect malicious files in the limited set of scanned resources, that does not offset the broader phishing indicators. The domain is extremely new, not ranked in major popularity lists, and uses copied branding and login flows associated with a well-known platform. A blacklist database also showed a suspicious listing at the time of review.
Based on these findings, this website may pose potential risks to visitors, particularly anyone entering account credentials or personal information.
Opis techniczny
The site was reachable over HTTPS with a valid Let's Encrypt certificate, hosted on an AWS EC2 server in Stockholm, Sweden, and served by Apache/2.4.66 on Debian. A valid certificate only indicates encrypted transport and should not be treated as proof of legitimacy. The domain was registered very recently, with an age of about 1 day at the time of this scan, and DNSSEC appears to be unsigned.
From an infrastructure perspective, the setup looks like a standard cloud-hosted web deployment rather than an established official property of the brand being displayed. The combination of a newly created domain, non-official hosting context, unsigned DNSSEC, and a login page imitating a major platform may be consistent with short-lived phishing infrastructure.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?