2017-facebook[.]blogspot[.]com

Analysis of the domain 2017-facebook.blogspot.com as of July 24 2026 shows multiple indicators of a high‑risk phishing operation. The domain is listed on three reputable phishing blocklists—PhishDestroy, OpenPhish, and Phishunt—and appears on three additional security blocklists referenced in the intelligence feed. DNS resolution returns the IP address 142.251.110.132, which belongs to Google’s infrastructure and corresponds to the Blogspot hosting platform. Registration data confirms the domain was created through Google LLC, consistent with the hosting environment. VirusTotal scans have yielded 19 positive detections out of 91 security‑vendor submissions, reinforcing the suspicion that the site distributes malicious content or deceptive credential‑collection pages.

The nameserver information is unavailable, which limits further infrastructure profiling such as ASN or geographic location beyond the IP’s known association with Google data centers. No public SSL/TLS details, HTTP status codes, page title, or content snapshots are present in the current intelligence set, leaving the exact phishing vector (e.g., credential‑stealing form, malicious download) undefined. Consequently, defenders cannot assess the specific payload or the targeted brand beyond the generic “facebook” reference embedded in the subdomain. The absence of these details also prevents verification of whether the site employs HTTPS or employs evasion techniques such as redirection chains.

Given the confirmed blocklist listings, the VirusTotal detection rate, and the active resolution to a Google‑controlled IP, the domain should be treated as malicious. Defensive actions include adding the domain to outbound and inbound URL filtering rules, enforcing blocklist updates, and monitoring DNS queries for the domain or its resolved IP.