facebook-partner[.]blogspot[.]com

This domain, facebook-partner.blogspot.com, is a confirmed brand impersonation threat specifically targeting the Facebook brand. Analysis indicates the site is designed to deceive users into believing they are interacting with a legitimate Facebook partner service, likely for credential theft or other fraudulent purposes. No specific crypto drainer kit was identified, but the impersonation of Facebook constitutes a high-risk social engineering attack.

Technical indicators provide clear evidence of malicious activity. VirusTotal detection shows 7 out of 95 security vendors flagging this domain as malicious, indicating broad industry recognition of the threat. The domain is registered through Google Blogger, with the IP address 142.251.110.132 resolving to Google infrastructure. The SSL certificate is issued by Google Trust Services. While the exact creation date is not provided in the intelligence, the domain remains active. Google Safe Browsing status and specific blocklist counts are not available in the provided data, but the 7/95 VT score reflects substantial blocklisting.

Current status indicates the domain is still active and serving its impersonation content. The page title is simply "facebook," further reinforcing the deceptive branding. Recommended response actions include immediate reporting to Google Blogger for abuse, adding the domain to blocklists, and notifying Facebook's security team. Remaining risk is high while the site remains live, as users may inadvertently submit credentials or personal information. Users should verify URLs carefully and avoid entering data on sites that are not official Facebook domains.