login-facebookaccount[.]blogspot[.]com

This domain, login-facebookaccount.blogspot.com, operates as a brand impersonation phishing site targeting Facebook users. The page mimics the legitimate Facebook login interface, presenting a fraudulent "Login Facebook" page title to deceive visitors into entering credentials. Such attacks are designed to harvest authentication details, enabling unauthorized account access, data exfiltration, or further social engineering campaigns. The domain leverages the trust associated with the targeted brand to increase the likelihood of successful credential theft. Analysis indicates the domain is hosted on Google Blogger infrastructure, resolving to the IPv6 address 2a00:1450:4001:807::2001 within AS15169 (Google LLC). It is flagged by 21 out of 95 security vendors on VirusTotal, with detections spanning phishing, brand impersonation, and malicious URL categories. The domain appears on two security blocklists and employs an SSL certificate issued by Google Trust Services (WE2). No historical registration data is available, as the domain was created through Blogger’s platform, which obscures traditional WHOIS details. Users who visited login-facebookaccount.blogspot.com should immediately assume credential compromise. Affected individuals must reset their Facebook passwords using a secure device and enable multi-factor authentication (MFA) via an authenticator app or hardware key. All active sessions should be terminated via Facebook’s security settings. Devices used to access the domain should undergo a full malware scan, and any stored credentials in browsers or password managers should be reviewed for unauthorized modifications. Organizations should monitor for anomalous login attempts or unauthorized access linked to compromised accounts.