facebook-cdn[.]blogspot[.]com

Analysis of facebook-cdn.blogspot.com indicates active brand impersonation targeting Facebook, classified as high-risk. The domain resolves to IP 142.250.154.132, a Google-hosted address, and presents a page title of 'Facebook,' directly aligning with the impersonated brand. SSL certification is provided by Google Trust Services, a legitimate but frequently exploited provider for phishing infrastructure. The domain appears on two security blocklists and is flagged by 13 of 95 vendors in a recent scan, confirming detection by multiple security engines. While the exact content of the site remains unanalyzed, the combination of a Facebook-branded page title, known blocklist presence, and vendor detections strongly suggests malicious intent. Defenders should treat this domain as confirmed phishing infrastructure and prioritize blocking or monitoring access attempts. The use of a blogspot.com subdomain may aid evasion of traditional domain-based defenses, warranting additional scrutiny of similar subdomain patterns.