Phishing detection: faceb00klogin.blogspot.com

Facebook
http://faceb00klogin.blogspot.com/?m=1 Access site
Screenshot
Screenshot of faceb00klogin.blogspot.com
Investigate
Domain faceb00klogin.blogspot.com0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 192.178.183.132
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://faceb00klogin.blogspot.com/?m=1
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
30 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +1.4 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +1.0 Young domain
  • +0.6 Brand impersonation in path
  • +0.6 Suspicious TLD
  • +0.5 Long domain
  • +0.2 Obfuscated JavaScript
  • +0.1 External scripts
  • +0.1 Deep subdomain
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Facebook login phishing page on Blogspot using character substitution replacing letters with zeros in the domain name to evade detection. Flagged by OpenPhish and displays Facebook branding in the title.

Brand impersonation in pathHigh entropyOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 84%
Domain & Network
Whois
Registrar MarkMonitor Inc.
Network
IP 192.178.183.132
Country GermanyGermany
Hosting Google LLC
ASN AS15169
TLS Cert -
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
PaaS platform Blogger
Web form
Network / ASN Google LLC
Web form
Registrar MarkMonitor Inc.
abusecomplaints@markmonitor.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-23 13:02 UTC  ·  Last refreshed 2026-09-04 21:30 UTC