facebook-psm[.]blogspot[.]co[.]id

Analysis of the domain facebook-psm.blogspot.co.id shows it is actively hosting a brand‑impersonation campaign targeting Facebook. The site returns an HTTP 302 redirect and presents a valid SSL certificate issued by Google Trust Services under the WE2 label, indicating use of Google’s infrastructure. DNS resolution points to 142.251.167.132, an IP owned by Google LLC (ASN 15169) located in the United States. Technological fingerprints reveal the presence of Blogger, Java, Python, OpenGSE and HTTP/3, consistent with a content‑management platform hosted on Google’s services. Reputation data is extremely poor: Scamadviser assigns a trust score of 1 / 100, and the domain appears on the PhishDestroy and PhishingDB blocklists. VirusTotal scans have flagged the site by 14 of 95 security engines, further confirming malicious intent. The page title is simply “Facebook”, matching the declared brand target. No additional evidence about the page’s content or payload is available from the provided intelligence. Given the combination of a brand‑impersonation label, low trust score, blocklist listings, and multiple vendor detections, the domain should be treated as high‑risk. Defenders are advised to block network connections to the domain and its resolved IP, add the domain to internal phishing‑prevention lists, and monitor for any related indicator traffic. Ongoing observation is recommended to capture any changes in hosting or payload delivery.