facebook-psm[.]blogspot[.]al

The domain facebook-psm.blogspot.al is currently active and has been identified as a social media phishing vector targeting Facebook users. Infrastructure analysis shows the site is hosted on Google’s network (ASN 15169) and resolves to IP 142.251.32.97, located in the United States. The site presents a valid SSL certificate issued by Google Trust Services under the WE2 certificate authority and responds with an HTTP 302 redirect. Detected technologies include Blogger, Java, Python, OpenGSE, and HTTP/3, indicating the use of a standard blog platform with added scripting components. Threat intelligence records indicate the domain is listed on one security blocklist, has been blocked by PhishDestroy, and 13 of 95 VirusTotal security vendors have flagged it as malicious. The page title returned is simply "Facebook," matching the declared brand target. While the exact content of the page has not been examined, the combination of brand impersonation, active status, and vendor detections warrants a high‑risk classification. Defenders should immediately add the domain to blocklists, monitor for outbound connections to the associated IP, and update detection rules to flag any HTTP 302 responses from this host. Continuous surveillance is advised to capture any changes in hosting or certificate attributes.