facebookfakepage[.]blogspot[.]com

The domain facebookfakepage.blogspot.com is currently flagged as a high‑risk generic phishing infrastructure. According to the latest intelligence, the site remains active despite being blocked by the PhishDestroy sinkhole, indicating that the malicious operator has either re‑hosted the content or is using a fallback mechanism. DNS resolution points to the IP address 142.251.13.132, which belongs to Google’s hosting range, and the domain was registered through Google LLC, a common registrar for compromised or abused blog subdomains.

VirusTotal analysis shows that four out of ninety‑one security vendors have identified the domain as malicious, confirming that at least a subset of detection engines consider it suspicious. The domain also appears on one external security blocklist, providing an additional data point for network‑level defenses. No nameserver information is available (NS_NOT_FOUND), and no further metadata such as SSL certificate details, HTTP response codes, Safe Browsing status, or OTX references were supplied.

Consequently, the exact content and phishing kit employed remain unknown, and the specific brand or credential harvesting technique cannot be confirmed without direct site inspection. Defenders should block traffic to the domain at perimeter firewalls and proxy filters, update DNS sinkhole lists with the observed IP, and monitor for any related sub‑domains that resolve to the same address. Continuous re‑scanning with multi‑vendor services is advised to capture any changes in detection scores, and any future detection of the domain on additional blocklists should be incorporated into incident response playbooks.