Facebook Username Takeover via Broken Link in Footer

How it was found

Summary:

• Target URL: https://www.opn.ooo/th-en/ (Footer Section)
• Affected Component:
• The Facebook icon in the footer links to: https://www.facebook.com/Opnglobal -This link is broken (leads to a “Deleted account” error).

Steps To Reproduce:

• Go to https://www.opn.ooo/th-en/ Click on facebook icon
• You will redirected to a https://www.facebook.com/Opnglobal available for takeover
• Check here https://brandsnag.com/facebook-username-checker for username

Impact

• Users can be misled into trusting a fake Facebook page.
• An attacker can post fake updates, run scam ads, or collect user data.
• The organization loses control over its social media presence.