ly-facebook[.]blogspot[.]com

Analysis of ly-facebook.blogspot.com shows it is a Blogger‑hosted subdomain that remains active as of 18 July 2026. The domain lacks publicly visible nameserver records (NS_NOT_FOUND) and resolves to the IP address 192.178.183.132, a host not typically associated with Google’s native blogging infrastructure, suggesting the use of custom DNS or a redirect service. VirusTotal has recorded 15 of 91 security vendors flagging the domain, providing independent indication of malicious activity. Registration through the Google Blogger platform means the site benefits from the provider’s reputable reputation, which can be leveraged to increase user trust in phishing attempts. No page content, title, or specific phishing page details have been disclosed, leaving the exact payload and victim‑targeting tactics uncertain. Defenders should prioritize blocking ly-facebook.blogspot.com at the DNS or proxy layer, add the domain to URL filtering policies, and monitor outbound connections to the associated IP address for anomalous traffic. Continuous re‑evaluation of the host IP and any future VirusTotal detections is advised to adjust mitigation measures promptly.