Phishing detection: facebookslogins.blogspot.com
Facebook Investigate
Domain
facebookslogins.blogspot.com0 CT hosts on apex
IP
192.178.183.132
URL
https://facebookslogins.blogspot.com/?m=1
Cert
WE2
Phishunt analysis Beta
47
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +3.9 Password field
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +2.2 Country mismatch
- +1.2 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.6 Long domain
- +0.6 Cross-origin form
- +0.6 Login text in screenshot
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 Obfuscated JavaScript
- +0.1 External scripts
- +0.1 Deep subdomain
25 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
A Blogspot-hosted page uses 'facebook' and 'logins' in its subdomain and title to impersonate Facebook's login, likely harvesting account credentials. Flagged by Google Safe Browsing (social engineering) and OpenPhish, and hosted on Google infrastructure in Germany.
Brand in domain labelGoogle Safe BrowsingOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-05 · confidence 85%
Domain & Network
Whois
Registrar
MarkMonitor Inc.
Network
IP
192.178.183.132 Google services
Country
Germany
Hosting
Google LLC
ASN
AS15169
TLS Cert
WE2
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise