vn-facebook[.]blogspot[.]com

vn-facebook.blogspot.com is flagged as a high‑risk generic phishing site. The domain was registered through Google LLC, and its authoritative name servers could not be resolved, indicating possible misconfiguration or reliance on the default DNS infrastructure of the hosting platform. DNS resolution points to the IPv4 address 192.178.183.132, which is the sole host associated with the domain at the time of analysis. The domain is listed on three reputable phishing blocklists and is actively blocked by PhishDestroy, OpenPhish, and Phishunt, confirming that multiple monitoring services have observed malicious activity originating from this host.

VirusTotal scans show that 19 of 91 security vendors have flagged the domain, providing independent corroboration of its malicious nature. The current status remains active, meaning the site is still reachable and may be serving phishing payloads. Evidence gaps include the absence of a published page title, missing SSL/TLS certificate details, and no publicly disclosed HTTP response codes, limiting the ability to assess transport‑layer security or content served. The lack of visible nameserver records further hampers attribution of the hosting environment.

Defenders should immediately add 192.178.183.132 to network‑level deny lists and enforce URL filtering rules that block vn-facebook.blogspot.com at proxy or gateway devices. Monitoring for DNS queries to this domain and for any outbound connections to its IP address is recommended. Incident response teams should treat any authentication attempts or credential submissions associated with the domain as suspicious and trigger appropriate containment procedures. Continuous re‑evaluation is advised, as changes to the hosting configuration or additional blocklist listings may alter the risk profile.