facebook-login-app[.]blogspot[.]com

PhishDestroy has identified the domain facebook-login-app.blogspot.com as a brand impersonation threat specifically targeting Facebook users. This domain, now taken offline, was designed to deceive users into believing they were accessing a legitimate Facebook login portal. The current status is offline, but similar threats may still be active.

This phishing domain was registered through Google Blogger on March 31, 2026, and resolved to the IP address 142.251.36.97. VirusTotal flagged it with 21 out of 95 security vendors marking it as malicious, and it appeared on one security blocklist. The SSL certificate was issued by Google Trust Services for WE2, and the page title observed was facbook-login-app.ga, which closely mimics the Facebook brand.

Because the domain is now offline, the immediate risk is reduced, but users should remain vigilant against similar phishing attempts. PhishDestroy recommends never entering credentials on pages with suspicious URLs, enabling two-factor authentication on Facebook, and reporting any similar domains to security teams. Users who may have interacted with this site should change their Facebook password immediately and monitor for unauthorized account activity.