Phishing detection: facebook.web1click.com

Facebook
https://facebook.web1click.com Access site
Screenshot
Screenshot of facebook.web1click.com
Investigate
Domain facebook.web1click.com4 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 160.187.147.221
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://facebook.web1click.com
urlscan Wayback archive.today
Cert Sectigo RSA Domain Validation Secure Server CA
crt.sh Censys Google CT
Phishunt analysis Beta
22 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +4.1 Brand in screenshot
  • +3.0 OpenPhish
  • +2.6 Brand in subdomain
  • +2.2 Country mismatch
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.6 Registrar reputation
  • +0.5 Long domain
  • +0.2 Suspicious TLD
  • +0.1 External scripts
  • +0.1 Deep subdomain
15 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Facebook using the brand as a subdomain of an unrelated domain hosted in Vietnam. The page title references Facebook and its form posts to the same host. Listed in OpenPhish, likely harvesting account credentials.

Brand in subdomainBrand in titleOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-12 · confidence 85%
Domain & Network
Whois
Registrar iNET SOFTWARE COMPANY LIMITED
Network
IP 160.187.147.221
Country VietnamVietnam
Hosting INTERDIGI JOINT STOCK COMPANY
ASN AS151858
TLS Cert Sectigo RSA Domain Validation Secure Server CA
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-12 13:03 UTC  ·  Last refreshed 2026-10-13 23:30 UTC