Phishing detection: zeta-facebook.blogspot.com

Facebook
https://zeta-facebook.blogspot.com Access site
Screenshot
Screenshot of zeta-facebook.blogspot.com
Investigate
Domain zeta-facebook.blogspot.com0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 192.178.183.132
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://zeta-facebook.blogspot.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
39 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +5.1 urlscan.io
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +1.4 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +1.0 Young domain
  • +0.6 Suspicious TLD
  • +0.5 Long domain
  • +0.1 Hyphens
  • +0.1 External scripts
  • +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Facebook on a Blogspot subdomain, with the brand visible in the page title and screenshots. Confirmed malicious by both OpenPhish and URLScan, it is likely designed to harvest Facebook account credentials.

OpenPhishurlscan.ioKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-27 · confidence 85%
Domain & Network
Whois
Registrar MarkMonitor Inc.
Network
IP 192.178.183.132
Country GermanyGermany
Hosting Google LLC
ASN AS15169
TLS Cert -
External detection OpenPhish urlscan.io
CleanGoogle Safe Browsing · PhishTank · TweetFeed
Report this phishing
PaaS platform Blogger
Web form
Network / ASN Google LLC
Web form
Registrar MarkMonitor Inc.
abusecomplaints@markmonitor.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-27 13:02 UTC  ·  Last refreshed 2026-09-07 21:30 UTC