facebook-psm[.]blogspot[.]ug

Analysis indicates that the domain facebook-psm.blogspot.ug is actively serving a site with the page title “Facebook”. The infrastructure is hosted on Google’s network (ASN 15169) and resolves to 142.250.186.33, a Google‑owned address located in the United States. The site is delivered over HTTPS using a certificate issued by Google Trust Services (WE2) and supports HTTP/3. Technology fingerprints reveal the use of Blogger, Java, Python and the OpenGSE framework, consistent with a typical blog‑hosting environment. A HTTP 302 redirect is observed, suggesting redirection to another resource. The domain is listed on at least one security blocklist and is flagged by PhishDestroy as a social‑media phishing campaign that impersonates Facebook. Reputation services assign a trust score of 1/100 and eight of ninety‑five VirusTotal scanners have reported malicious activity. While the page title confirms a Facebook reference, the actual page content has not been examined, leaving the specific credential‑capture mechanisms unknown. Defenders should treat the domain as high‑risk: block the FQDN at perimeter and endpoint filters, monitor DNS queries for the address 142.250.186.33, and enforce multi‑factor authentication for Facebook accounts to mitigate credential theft. Ongoing observation is advised to detect any changes in hosting or payload delivery.