facebook-find[.]blogspot[.]com
Phishing- und Sicherheitsprüfung für facebook-find.blogspot.com
“facebook”
facebook-find.blogspot.com — Letzter bekanntermaßen aktiv (HTTP 200). Markenidentität: Facebook; Betrugstyp: Impersonation. Zusammenfassung der Beweislage: VirusTotal 16/91 (Criminal IP, alphaMountain.ai, BitDefender, CyRadar, ESET); URLScan malicious verdict; 1 external blocklist match (Phishunt); CF Radar malicious; PhishDestroy score 100/100. Registrar: Google Domains.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain facebook-find.blogspot.com is currently active and classified as a high‑risk brand impersonation targeting Facebook. Infrastructure analysis shows the site resolves to the IP address 192.178.183.132, which is hosted by Google LLC in the United States. The HTTPS certificate is issued by Google Trust Services under the WE2 certificate authority, confirming the use of Google’s TLS infrastructure. DNS queries return a “NS_NOT_FOUND” status, indicating that authoritative name server information is not publicly disclosed. The web server responds with HTTP 200, and the page title is simply "facebook," matching the declared brand target. Technical fingerprints reveal the presence of Blogger as the content management platform, along with Java, Python, OpenGSE, Google AdSense, and HTTP/3 support, suggesting a standard Google‑hosted blog setup repurposed for malicious use.
Detection data shows that 15 out of 91 security vendors on VirusTotal flag the domain, and it appears on two external blocklists. Both PhishDestroy and Phishunt have listed the domain as malicious, reinforcing its reputation as a phishing vector. The site is registered through Google LLC, which aligns with the hosting and SSL details. No additional public intelligence, such as Safe Browsing or OTX entries, is presently available.
Uncertainty remains around the specific payload delivered to victims, as no page content analysis has been published. Defenders should block the domain at DNS and proxy layers, monitor outbound traffic for connections to 192.178.183.132, and update intrusion detection signatures to include the observed user‑agent and technology stack. Security teams are advised to add the domain to internal blocklists, advise users to avoid any unsolicited communications referencing Facebook that direct to a blogspot URL, and continue to monitor VirusTotal and other reputation services for any changes in detection scores.
Datenabdeckung13 recorded checks
Erkenntnisse zur Netzwerksicherheit
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Abgleich mit Bedrohungsdaten · source references
Technologien · 6 identified
Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.
www.blogger.com 100 % KonfidenzJava is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.
java.com 100 % KonfidenzOpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.
code.google.com 100 % KonfidenzGoogle AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.
www.google.com 100 % KonfidenzHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of facebook-find.blogspot.com · checked Jul 19, 2026
Analyse der Website-Konfiguration
Nachweise und externe BerichteIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.