facebookqq.vip - phishunt.io

Facebook

https://facebookqq.vip Access site

Screenshot

Investigate

Domain facebookqq.vip1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 104.21.71.126

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://facebookqq.vip

urlscan

Wayback

archive.today

Cert Let's Encrypt

crt.sh

Censys

Google CT

Phishunt analysis Beta

39 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+3.7 Brand in domain label
+3.2 Young domain
+1.9 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.9 No registrar lock
+0.7 Brand in cert SAN
+0.6 Login text in screenshot
+0.6 Suspicious TLD
+0.5 Young certificate
+0.3 Free CA
+0.3 Long domain

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Impersonates Facebook on a .vip TLD, with the brand name embedded in the SSL certificate SAN and login forms detected on-page. Confirmed malicious by urlscan. Presents a convincing login clone likely designed to harvest Facebook account credentials at scale.

Brand in cert SANLogin text in screenshoturlscan.io

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-14 · confidence 88%

Domain & Network

Whois

Registrar Dynadot Inc

Network

IP 104.21.71.126

Country