Phishing detection: facebook-login-page-4g6p.onrender.com

Facebook
http://facebook-login-page-4g6p.onrender.com Access site
Screenshot
Screenshot of facebook-login-page-4g6p.onrender.com
Investigate
Domain facebook-login-page-4g6p.onrender.com0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 216.24.57.15
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://facebook-login-page-4g6p.onrender.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
40 high suspicion likely_phishingheuristic risk score · not a probability
Keyword matchBrand in domain labelBrand + login token
22 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Spoofs a Facebook login page on a Render.com PaaS subdomain with the words facebook-login-page embedded in the domain. A same-origin form captures submitted credentials. Flagged malicious by Google Safe Browsing, OpenPhish, and urlscan.

Brand + login tokenSame-origin formOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-31 · confidence 95%
Domain & Network
Whois
Registrar Amazon Registrar, Inc.
Network
IP 216.24.57.15
Country United StatesUnited States
Hosting Render
ASN AS397273
TLS Cert -
External detection Google Safe Browsing OpenPhish urlscan.io
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed
Report this phishing
PaaS platform Render
abuse@render.com
Registrar Amazon Registrar, Inc.
abuse@amazon-registrar.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-31 13:01 UTC  ·  Last refreshed 2026-08-02 07:30 UTC