facebook-fake[.]blogspot[.]com

Analysis indicates that facebook-fake.blogspot.com is an active phishing domain targeting Facebook users, as of July 25, 2026. The domain is hosted on Google LLC infrastructure and resolves to IP address 192.178.183.132, though no nameservers are currently configured, which may suggest recent deployment or evasion tactics. Detection engines from 18 of 91 security vendors on VirusTotal have flagged this domain, and it appears on two independent security blocklists, including PhishDestroy and Phishunt. While the domain remains active, no additional details about the phishing kit, exact page content, or targeted brand elements beyond the domain name itself have been confirmed.

Infrastructure analysis reveals the domain is registered through Google’s Blogspot platform, a common vector for low-cost phishing campaigns due to its accessibility and perceived legitimacy. The absence of nameserver records may indicate an attempt to obscure hosting details or delay takedown efforts. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS, proxy, or endpoint level.

Security teams are advised to monitor associated IP 192.178.183.132 for additional malicious domains and review logs for connections to this address. Further investigation into the phishing kit or payload is recommended if internal telemetry indicates user exposure. No SSL certificate or HTTP response details are currently available, limiting assessment of encryption or redirection behavior.