facebook-system[.]blogspot[.]com

This domain, facebook-system.blogspot.com, is actively impersonating Facebook as part of a brand impersonation scheme. Infrastructure analysis reveals it is hosted on Blogger infrastructure, resolving to IP 192.178.183.132 within a US-based network operated by Google LLC. The domain lacks configured nameservers, a common characteristic of hastily deployed phishing pages on free hosting platforms. A valid SSL certificate issued by Google Trust Services is present, which may lend superficial legitimacy to the site but does not mitigate the underlying threat. The page title explicitly matches the target brand, 'Facebook,' and the domain itself incorporates the brand name, increasing the likelihood of deception. Security vendors have flagged the domain, with 17 of 91 engines on VirusTotal detecting malicious activity. It appears on two security blocklists, including PhishDestroy and Phishunt, further corroborating its classification as a high-risk impersonation site. Detected technologies include Blogger, Java, Python, OpenGSE, Google AdSense, and HTTP/3, suggesting a standard Blogger-hosted environment with potential third-party integrations. Defenders should treat this domain as an active threat. The absence of nameservers and reliance on Blogger infrastructure indicate low-effort deployment, yet the use of a valid SSL certificate and brand-specific naming may still deceive end users. Immediate blocking at the DNS or network level is recommended, along with monitoring for related subdomains or redirects. No further content analysis has been conducted, so specific phishing mechanics (e.g., credential harvesting, malware distribution) remain unconfirmed. Given the domain's persistence and detection by multiple security sources, assume it is actively targeting users as of July 12, 2026.