facebook-int[.]blogspot[.]com

The domain facebook-int.blogspot.com is currently classified as a generic phishing site with a high risk rating. Registration data shows the domain was created through Google LLC, indicating the registrar is a major cloud provider. DNS queries return no identifiable nameserver records (NS_NOT_FOUND), which may suggest reliance on default hosting resolver settings or intentional obfuscation. The domain resolves to IP address 142.251.127.132, an address that belongs to Google’s network, confirming that the hosting infrastructure is supplied by the registrar’s cloud platform rather than a dedicated malicious hosting service.

The domain appears on three independent phishing blocklists—PhishDestroy, OpenPhish, and Phishunt—demonstrating that multiple threat‑intelligence feeds have observed malicious activity associated with it. VirusTotal analysis shows that six out of ninety‑one scanned security vendors have flagged the domain, providing additional corroboration of its abusive nature. No further data such as SSL details, HTTP status codes, page title, or brand targeting is presently available, leaving the exact content and lure mechanisms unverified.

Given the convergence of blocklist listings, registrar provenance, and multi‑vendor detection, defenders should treat this domain as actively malicious. Recommended mitigations include adding the domain to network and endpoint deny lists, updating web filtering policies to block resolution to the associated IP, and monitoring for any future DNS or hosting changes. Continuous re‑evaluation is advised, as the absence of detailed page analysis means the threat landscape could evolve without immediate visibility.