rama-facebook[.]blogspot[.]com

The domain rama-facebook.blogspot.com is currently flagged as a high‑risk generic phishing site. According to the latest intelligence collected on July 29 2026, the sub‑domain is hosted on Google’s Blogger platform and resolves to the IP address 142.251.14.132, which belongs to Google’s public infrastructure. Registration information shows the domain was created through Google LLC, confirming that the hosting environment is a legitimate cloud service that is being abused. The site has been listed on a single security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing organization considers the content malicious.

VirusTotal analysis reports that six of ninety‑one scanning engines have generated a detection for this domain, reinforcing the suspicion of malicious intent. Nameserver data could not be retrieved (NS_NOT_FOUND), which may reflect a transient DNS query failure or intentional obfuscation. No additional contextual data such as page title, brand targeting, or kit attribution is available at this time, so the precise phishing lure remains unconfirmed. Defenders should prioritize immediate containment by adding the full hostname to network‑level deny lists, DNS sinkhole rules, and endpoint web‑filter policies.

Continuous monitoring of the IP address and any related sub‑domains is advised, as the underlying Google infrastructure can host multiple abusive sites. Because the domain is still active, periodic re‑scans with VirusTotal and other sandbox services are recommended to detect changes in payload or hosting. Organizations that rely on Facebook credentials should educate users about unsolicited login requests and enforce multi‑factor authentication to mitigate credential theft should a victim be redirected to this site.