facebook-psm[.]blogspot[.]com[.]br

This domain, facebook-psm.blogspot.com.br, poses an elevated risk as a brand impersonation threat specifically targeting Facebook users. Analysis indicates the page mimics Facebook's login interface, likely designed to harvest credentials or deploy social engineering attacks. The domain operates under the guise of legitimacy by leveraging a well-known platform, increasing the likelihood of user deception through familiarity with the hosting service. Infrastructure analysis reveals the domain is registered through Google (ASN: 15169) and resolves to the IP address 142.250.185.97, located in the United States under Google LLC. Despite its creation date of December 05, 2004, which predates many malicious domains, the subdomain structure and recent activity align with phishing campaigns. VirusTotal detection metrics show 15 out of 95 security vendors flagging the domain as malicious, while one security blocklist, PhishDestroy, has already classified it as a threat. The SSL certificate, issued by Google Trust Services, further obscures its malicious intent by providing an appearance of security. Users who visited facebook-psm.blogspot.com.br should immediately revoke any entered credentials, particularly for Facebook or linked accounts. It is recommended to scan the device for malware using updated security tools, as credential harvesters may deploy secondary payloads. Additionally, affected users should monitor financial and social media accounts for unauthorized activity and enable multi-factor authentication where available to mitigate further risk. The domain's current offline status does not preclude future reactivation, warranting continued vigilance.