barcelona-facebook[.]blogspot[.]com

This domain, barcelona-facebook.blogspot.com, is flagged for brand impersonation targeting Facebook. Analysis indicates the threat type involves a fake login portal designed to harvest user credentials by mimicking the legitimate Facebook interface. No crypto drainer or malware payloads were identified in initial scans, but the domain’s structure and page title align with credential theft campaigns. Infrastructure analysis reveals the domain was registered on March 02, 2026, through Google LLC, resolving to IP address 142.251.141.65 (AS15169, US). VirusTotal reports 13 out of 95 security vendors flagging the domain as malicious. It appears on two security blocklists, and the SSL certificate is issued by Google Trust Services (WE2). The page title explicitly displays 'facebook,' reinforcing the impersonation attempt. The domain is currently offline, likely due to takedown actions or suspension by the hosting provider. Despite its inactive status, residual risk persists for users who may have interacted with the domain prior to its removal. Organizations are advised to monitor for credential reuse attempts and update blocklists to include this domain and its associated IP. Users should verify domain authenticity before entering credentials, particularly on platforms hosted under third-party services like blogspot.com.