facebook-login0[.]blogspot[.]com

Analysis indicates that facebook-login0.blogspot.com is an active credential phishing site targeting Facebook accounts. The domain is hosted on the Blogger service and resolves to IP 142.251.127.132, an address owned by Google. No authoritative nameservers are listed (NS_NOT_FOUND), which is typical for Blogger‑generated subdomains. VirusTotal reports that 8 of 91 scanning engines flag the domain, suggesting a moderate detection consensus. The site’s registration through Google Blogger provides a legitimate‑looking infrastructure that can evade simple URL reputation checks. Concrete evidence of the page content is not available in the current intelligence; therefore the exact phishing vector (e.g., replica login form) remains unconfirmed. Defenders should block DNS resolution for the full subdomain, add the domain to URL filtering lists, and monitor outbound traffic for attempts to submit credentials to this host. User education campaigns should warn employees that legitimate Facebook login pages are served from facebook.com and its subdomains, not from blogspot.com addresses. Continuous surveillance of related Blogger subdomains is recommended to detect future variants.