facebook-developers[.]blogspot[.]com

On 7 August 2026 analysts observed that the subdomain facebook-developers.blogspot.com remains active and is classified as a high‑risk generic phishing site. The domain was created on 31 July 2000 and is hosted under the Google Blogger service, indicating that the registrar is Google. DNS resolution points to the single IPv4 address 192.178.25.65, which is the only known hosting endpoint associated with the campaign.

Reputation services have flagged the domain: three independent phishing blocklists (PhishDestroy, OpenPhish, Phishunt) list it as malicious, and it appears on three additional security blocklists. VirusTotal scans show that 14 out of 91 security vendors have generated a detection for the domain, providing further confirmation of its abusive nature. The combination of an old registration date, a free‑hosting registrar, and a dedicated IP address suggests a low‑cost infrastructure that is nonetheless being leveraged to lure victims, likely by impersonating Facebook services given the domain name.

At present no public SSL certificate details, HTTP status codes, or page‑title information have been disclosed, leaving the exact content of the landing page undocumented. Consequently, defenders should treat the domain as hostile, enforce network‑level blocks to the IP 192.178.25.65, add the fully qualified domain name to URL filtering policies, and monitor related queries for signs of credential harvesting. Continuous re‑evaluation is advised, as additional detection points or content analysis may emerge.