mb-facebook[.]blogspot[.]com

This domain, mb-facebook.blogspot.com, is currently active and has been observed on two public phishing blocklists. DNS resolution points to the IPv4 address 142.251.110.132, which belongs to the Google Cloud infrastructure. The domain is registered through Google LLC, indicating that the registration service itself is not compromised. Nameserver queries return NS_NOT_FOUND, suggesting that the authoritative name server records are missing or obscured.

VirusTotal analysis shows that 20 of 91 scanned security vendors flag the domain as malicious, reinforcing the blocklist findings. The domain is explicitly blocked by the PhishDestroy and Phishunt blocklist feeds, both of which specialize in phishing‑related indicators. No additional intelligence such as page title, SSL certificate details, or HTTP response codes is presently available, limiting the depth of content‑level analysis.

The combination of blocklist presence, a non‑trivial detection rate on VirusTotal, and resolution to a cloud‑hosted IP indicates a high‑risk phishing infrastructure that likely targets users seeking a Facebook login experience. Defenders should add mb-facebook.blogspot.com to endpoint and network deny lists, enforce DNS sink‑hole or blocklist filtering for the domain, and monitor traffic to the associated IP for any anomalous connections. Continuous re‑evaluation is advised, as the domain remains active and may evolve its payload or hosting configuration.