faceb00k-pendrive[.]blogspot[.]com

This domain is flagged as a high-risk phishing site specializing in Facebook credential theft. Analysis indicates the page uses a deceptive 'Free Facebook Pendrive' scheme to trick users into entering login details, which are then harvested by threat actors. The domain operates under the guise of a legitimate promotion but lacks any affiliation with Facebook or authorized partners. Infrastructure analysis reveals the domain is hosted on Google Blogger, a common platform exploited for phishing due to its low-cost registration and trusted reputation. The page resolves to IP address 142.251.127.132, associated with Google LLC infrastructure, though this does not imply endorsement. VirusTotal detection rates show 12 out of 95 security vendors classify this domain as malicious, confirming its phishing nature. No legitimate creation date or registration details beyond Blogger’s platform are available, and no reputable blocklists or trust scores currently reflect its malicious status, likely due to its recent activation or evasion techniques. Mitigation requires immediate blocking of the domain at network and endpoint levels. Organizations should deploy web filtering rules to prevent access to faceb00k-pendrive.blogspot.com and monitor for related subdomains or typosquatting variants. Users who interacted with the site must reset Facebook credentials from a secure device and enable multi-factor authentication. Security teams should inspect logs for connections to 142.251.127.132 or referrer headers containing the domain. Awareness training should emphasize skepticism toward 'free' offers tied to login requirements, particularly those hosted on third-party platforms like Blogger.