aboo-facebook[.]blogspot[.]com

PhishDestroy identified aboo-facebook.blogspot.com as a confirmed brand impersonation threat, specifically targeting the Facebook brand. The site's page title displayed 'FaceBook' in an attempt to deceive visitors into believing they were accessing legitimate Facebook services. No specific crypto drainer kit was detected, but the domain's purpose was clearly credential theft through brand impersonation.

Technical indicators reinforce the malicious nature of this domain. VirusTotal flagged it with a score of 20 out of 95 security vendors, indicating widespread detection. The domain was registered through MarkMonitor, Inc. on July 31, 2000, and resolves to the IPv6 address 2a00:1450:4001:80f::2001. It appears on 2 security blocklists, and its SSL certificate was issued by Google Trust Services (WE2). Google Safe Browsing likely flagged this site, contributing to its blocklist presence.

As of the latest assessment, aboo-facebook.blogspot.com has been taken offline, effectively neutralizing the immediate threat. However, users should remain vigilant as similar domains may emerge. PhishDestroy recommends avoiding any unsolicited links, verifying URLs before entering credentials, and reporting suspicious sites to security teams or anti-phishing organizations. No further action is required for this specific domain, but ongoing monitoring is advised.