Phishing detection: facebookshops.best

Facebook
http://facebookshops.best Access site
Screenshot
Screenshot of facebookshops.best
Investigate
Domain facebookshops.best3 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 217.70.184.55
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://facebookshops.best
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
22 low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelTweetFeed
16 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Facebook Shops and presents login-related content to harvest Facebook credentials. It uses a redirect chain that terminates at the real Facebook site, a common tactic to appear legitimate after credential capture. Hosted in France via Gandi and flagged by TweetFeed.

Final host mismatchLogin text in screenshotTweetFeed
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-27 · confidence 80%
Domain & Network
Whois
Registrar Gandi SAS
Network
IP 217.70.184.55
Country FranceFrance
Hosting GANDI SAS
ASN AS29169
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-27 05:05 UTC  ·  Last refreshed 2026-07-27 07:30 UTC