facebook-help-m[.]blogspot[.]com

The domain facebook-help-m.blogspot.com is currently active and has been observed hosting a generic phishing campaign targeting users of the Facebook platform. The site is hosted on Google Blogger, as indicated by the registration information, and resolves to the IP address 142.251.127.132, which belongs to Google’s infrastructure. VirusTotal reports that 9 out of 91 security vendors have flagged the domain, suggesting a non‑trivial level of malicious activity. The domain’s nameserver data could not be retrieved, which limits further attribution. At present, no additional technical artifacts such as malware samples, payload URLs, or phishing page screenshots have been publicly released, so the full scope of the operation remains unclear. Defenders should block network connections to the domain and monitor DNS queries for look‑ups of facebook‑help‑m.blogspot.com. Email security gateways should be configured to flag messages containing URLs that resolve to this host, and incident response teams should treat any credential submissions to the domain as compromised. Continuous monitoring of VirusTotal and similar threat feeds is recommended to capture any changes in detection counts or new associated indicators.