facebookcolorvisitor[.]blogspot[.]com
“Facebook Login”
Ringkasan bukti
This domain, facebookcolorvisitor.blogspot.com, is flagged for brand impersonation targeting Facebook, a high-profile social media platform. Analysis indicates the domain was designed to mimic the Facebook login interface, as evidenced by the page title 'Facebook Login.' No specific drainer kit signatures were identified, but the domain exhibits characteristics consistent with credential harvesting campaigns, including the use of a subdomain under a legitimate blogging platform to evade initial scrutiny.
Technical indicators reveal the domain was created on February 27, 2026, and is registered through MarkMonitor, Inc. It resolves to the IP address 142.251.141.65, hosted under AS15169 (Google LLC) in the United States. The domain is flagged by 19 out of 95 security vendors on VirusTotal, and appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE2), a common practice for malicious domains leveraging legitimate infrastructure. Google Safe Browsing (GSB) has not explicitly listed this domain at the time of analysis, though it has been blocked by other security mechanisms.
As of the latest assessment, facebookcolorvisitor.blogspot.com has been taken offline, likely due to enforcement actions by the hosting provider or registrar. Despite its current inactive status, the domain remains a residual risk due to potential reuse or repurposing by threat actors. Organizations are advised to monitor for re-emergence of this domain or similar patterns, such as subdomains under blogspot.com impersonating login pages. Network-level blocking of the resolved IP (142.251.141.65) and implementation of strict SSL certificate validation policies are recommended to mitigate future exposure.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | facebookcolorvisitor.blogspot.com |
malicious | Sinkholed |
| OpenDNS | facebookcolorvisitor.blogspot.com |
phishing | Phishing Block |
| DNS4EU | facebookcolorvisitor.blogspot.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
Analisis VirusTotal
Analisis Konfigurasi Situs
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive