Phishing detection: facebooklogin1234.blogspot.com
Facebook Investigate
Domain
facebooklogin1234.blogspot.com0 CT hosts on apex
IP
142.251.20.132
URL
https://facebooklogin1234.blogspot.com
Cert
WE2
Phishunt analysis Beta
36
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +2.2 Country mismatch
- +1.3 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.6 Long domain
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 Obfuscated JavaScript
- +0.1 External scripts
- +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates a Facebook login page hosted on Blogspot, abusing Google infrastructure to appear credible. The Facebook brand is embedded in both the apex label and page title. Confirmed malicious by OpenPhish and part of a cluster of similarly structured phishing pages.
OpenPhishBrand in domain labelKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-19 · confidence 88%
Domain & Network
Whois
Registrar
MarkMonitor Inc.
Network
Country
Germany
Hosting
Google LLC
ASN
AS15169
TLS Cert
WE2
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise