Phishing detection: facebookhints.blogspot.com

Facebook
https://facebookhints.blogspot.com Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
Domain facebookhints.blogspot.com0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 142.251.110.132
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://facebookhints.blogspot.com
urlscan Wayback archive.today
Cert WE2
crt.sh Censys Google CT
Phishunt analysis Beta
36 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +3.7 Brand in domain label
  • +3.4 Cert reuse
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +1.4 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.6 Suspicious TLD
  • +0.5 Young certificate
  • +0.5 Long domain
  • +0.3 Free CA
  • +0.2 Obfuscated JavaScript
  • +0.1 External scripts
  • +0.1 Deep subdomain
22 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Facebook on a Blogspot subdomain containing the brand name, hosted on Google infrastructure in Germany. The page includes a same-origin form for credential submission and is part of a known cluster. Confirmed malicious by OpenPhish.

Same-origin formBrand in domain labelOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-04 · confidence 82%
Domain & Network
Whois
Registrar MarkMonitor Inc.
Network
IP 142.251.110.132
Country GermanyGermany
Hosting Google LLC
ASN AS15169
TLS Cert WE2
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
PaaS platform Blogger
Web form
Network / ASN Google LLC
Web form
Registrar MarkMonitor Inc.
abusecomplaints@markmonitor.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-09-04 01:03 UTC  ·  Last refreshed 2026-09-04 21:30 UTC