z-facebook[.]blogspot[.]com

Analysis of the domain z-facebook.blogspot.com indicates that it is currently active and is being used for generic phishing operations. The domain was registered through Google LLC, consistent with the Blogger platform hosting model. Network resolution points to the IPv4 address 192.178.183.132; no additional hosting details such as ASN or geographic location are disclosed in the available data. On VirusTotal, 16 of 91 security vendors have flagged the domain as malicious, reinforcing the suspicion raised by multiple phishing‑specific blocklists.

The domain appears on three independent blocklists – PhishDestroy, OpenPhish, and Phishunt – and is therefore likely to be blocked by many enterprise web filters that ingest these feeds. The nameserver query returned NS_NOT_FOUND, suggesting that standard DNS enumeration did not retrieve a valid NS record, which may be a result of dynamic or privacy‑focused DNS configuration. No SSL certificate details, HTTP status codes, or page‑title information have been extracted, leaving the exact content of the landing page unverified. Consequently, defenders cannot confirm the specific lure or credential‑capture technique employed, only that the domain is associated with generic phishing activity.

Given the combination of registrar information, IP resolution, vendor detections, and inclusion on three reputable phishing blocklists, the domain should be treated as high‑risk. Defensive actions include adding the domain to deny‑list rules in proxy and firewall devices, ensuring that DNS filtering solutions block the associated IP address, and updating endpoint web‑filter policies with the latest blocklist entries. Continuous monitoring of VirusTotal and any future threat‑intel feeds is recommended to capture any changes in detection ratios or additional indicators such as SSL certificates or page content that may emerge.