log-in-facebook[.]blogspot[.]com

This domain, log-in-facebook.blogspot.com, is flagged as a high‑risk generic phishing site targeting Facebook credentials. DNS resolution points to the IP address 142.251.14.132, which belongs to the Google Cloud infrastructure and is associated with the registrar Google LLC. The domain appears on one known security blocklist and has been actively blocked by the PhishDestroy network, confirming that defensive operators have already taken mitigation steps. VirusTotal analysis shows that 13 of 91 scanning engines have raised detections, indicating that a notable minority of reputable scanners consider the site malicious. The nameserver query returned NS_NOT_FOUND, meaning the authoritative nameserver information could not be retrieved, and no SSL/TLS certificate details or HTTP response codes are currently available in the intelligence feed.

Consequently the exact page content, title, and any redirect behavior remain unverified. Given the active status and the confirmed presence on a blocklist, defenders should immediately add log-in-facebook.blogspot.com to URL filtering policies, block the associated IP 142.251.14.132 at network perimeters, and monitor outbound traffic for connections to that address. Continuous re‑scanning with VirusTotal and other sandbox services is advised to capture any changes in the payload or hosting.

Organizations using Google Workspace should be aware that the domain leverages a Blogger sub‑domain, which may bypass some naïve allow‑list configurations; therefore, explicit deny rules for the full host name are recommended. Threat intel teams should also share indicators of compromise, such as the domain and IP, with industry ISACs to broaden collective detection. Until additional telemetry such as page title or SSL fingerprint becomes available, the precautionary stance should remain at high confidence for malicious intent.