facebook-login65[.]blogspot[.]com

This domain, facebook-login65.blogspot.com, is actively flagged as a high-risk credential phishing site targeting login credentials. As of July 19, 2026, the domain remains operational and resolves to IP address 142.251.13.132. Analysis indicates it is hosted on a platform commonly abused for phishing due to its free subdomain offerings, which reduce traceability and increase attacker agility. Google Safe Browsing has classified the domain under SOCIAL_ENGINEERING, confirming its use in deceptive practices aimed at tricking users into disclosing sensitive information. Thirteen of 95 security vendors on VirusTotal have detected this domain as malicious, providing corroborating evidence of its phishing intent. The exact content or phishing kit in use has not yet been analyzed, so specific targeting methods (e.g., fake login pages, redirects, or embedded forms) remain unconfirmed. However, the subdomain structure ('facebook-login65') strongly suggests an attempt to impersonate a legitimate social media login portal, likely aiming to harvest account credentials. Defenders should treat this domain as an active threat. Immediate actions include blocking the domain and its resolving IP at the network perimeter, updating endpoint protection rules to detect and prevent access, and monitoring for user reports of exposure. If internal logs indicate any access attempts, initiate credential reset protocols for affected accounts and review authentication logs for unauthorized access. Given the domain’s continued activity, ongoing monitoring is recommended to assess any shifts in infrastructure or tactics.