facebookloginia[.]blogspot[.]com

The domain facebookloginia.blogspot.com is currently active and classified as a high‑risk credential‑phishing infrastructure. DNS resolution returns the address 142.251.14.132, and the authoritative name server entry is reported as NS_NOT_FOUND, indicating that standard name‑server queries do not return a valid delegation. The domain is registered through Google LLC, suggesting use of a reputable registrar to increase perceived legitimacy. Google Safe Browsing has flagged the URL for social‑engineering, and one public blocklist includes the domain.

PhishDestroy also lists it as blocked, confirming that multiple anti‑phishing feeds have observed malicious activity. VirusTotal analysis shows 11 of 91 scanning engines flag the domain, reinforcing the suspicion of malicious use. No public page title, SSL certificate details, or HTTP response codes are available in the current intelligence set, leaving the exact content and delivery mechanism unverified. Defenders should prioritize blocking the domain at network perimeter and endpoint filters, especially given the confirmed Safe Browsing and blocklist entries.

Continuous monitoring of DNS queries for the IP 142.251.14.132 is advised, as the address may be shared among other Google‑owned services, potentially complicating attribution. Organizations should enforce credential‑verification controls for any login attempts pointing to this domain, and incident response teams should collect any logs that reference the domain for further forensic correlation. The lack of visible page metadata means that dynamic analysis or sandboxed browsing may be required to reveal the exact phishing payload, but the existing indicators already warrant immediate mitigation.