facebooklogin770[.]blogspot[.]com

The domain facebooklogin770.blogspot.com is currently active and resolves to the IP address 142.251.110.132. The IP belongs to Google’s network, which is consistent with the registrar information showing the domain was registered through Google LLC. Google Safe Browsing has flagged the domain for social engineering, indicating that it is being used to harvest credentials. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, reinforcing the assessment of malicious intent.

VirusTotal records indicate that the site has been scanned by 91 security vendors; at the time of the latest check no vendor has issued a detection, but the absence of a detection does not constitute a safety guarantee. The DNS configuration returns NS_NOT_FOUND, suggesting that authoritative name‑server records are missing or not publicly resolvable, a pattern often observed in rapidly deployed phishing infrastructure. No SSL certificate details, HTTP status codes, or page‑title information are presently available, limiting further content‑level analysis.

Given the combination of a Google‑hosted subdomain, Safe Browsing flag, blocklist presence, and the high‑risk classification as credential phishing, defenders should treat the domain as hostile. Recommended actions include adding the domain to network‑level deny lists, updating web‑filtering rules to block traffic to the associated IP, and monitoring for any related subdomains that may be created under the same registrar. Continuous re‑evaluation is advised, as changes to DNS records or additional detections could alter the threat posture.