The urlDNA scanning service posted on Mastodon on 11 November 2026 that hxxp://www.facebook-account-login-page.blogspot.com/ is a possible phishing page, linking its scan. The domain also appears on the Phishing Army…
Source: infosec.exchange · published
The urlDNA scanning service posted on Mastodon on 11 November 2026 that hxxp://www.facebook-account-login-page.blogspot.com/ is a possible phishing page, linking its scan. The domain also appears on the Phishing Army extended blocklist, a public phishing domain blocklist. blogspot.com is Google's shared blog-hosting domain; only this blog is reported here, and Google and Meta are not the operators. Sign in to Facebook only through the official app or by typing facebook.com yourself.
Pages that copy a familiar sign-in form are usually reached from an email, text, advert, comment or search result that warns of a problem with an account, a delivery or a payment. The form looks official, but anything typed — a password, a one-time code or a wallet recovery phrase — goes to whoever set up the page rather than to the real company. Those details can be used at once to take over the account, change the recovery email or empty a wallet.
facebook-account-login-page.blogspot.com is a Blogger site, not facebook.com. Facebook and Meta were impersonated and are not involved. Other Facebook-themed Blogger pages have been flagged on the same pattern, including facebook-verification-system3.blogspot.com, reported the same day. Sign in to Facebook only in the official app or by typing facebook.com yourself.
Facebook does not host official login or identity checks on Blogspot. If you already typed a password on that page, change it in the official app, review logged-in sessions and tell anyone who shares the account.
Public post on Mastodon, 11 November 2026: https://infosec.exchange/@urldna/117598168643336370
The indicators come from this source and have not been independently checked by scammers.com.
The BeeSINT threat-intelligence account posted on Mastodon on 11 November 2026 a 'Phishing Spotlight' on www.facebook-verification-system3.blogspot.com. The domain also appears on the Phishing Army extended blocklist,…
The OSINT account BeeSINT posted on Mastodon on 12 November 2026 a 'Phishing Spotlight' on facebook-profile-login[.]blogspot[.]com, built on Blogger, linking its analysis. The domain also appears on the Phishing Army…
PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…
PhishDestroy posted on Mastodon on 12 November 2026 that xncok12[.]weebly[.]com is a phishing page. Its record describes a GMX.NET-branded email and password login form, flagged by 17 of 92 VirusTotal engines. GMX is…
PhishDestroy posted on Mastodon on 12 November 2026 that xfinitywebmailw3r[.]weebly[.]com is a phishing page. Despite the Xfinity name in the address, its record describes a Network Solutions-branded webmail login for…
Website scanning service ScanMalware posted on X on 12 November 2026 that chronos-reprieve-658a.s2506015[.]workers[.]dev is a confirmed scam. Its scan report describes a phishing kit imitating Meta's Privacy Center an…