Phishing detection: facebookdl.pages.dev
Facebook Screenshot
No screenshot available yet
Captured automatically on the next refresh cycle
Investigate
Domain
facebookdl.pages.dev1 CT host on apex
urlscan
VirusTotal
Whois
IP
172.66.47.57
ipinfo
Greynoise
URL
https://facebookdl.pages.dev
Phishunt analysis Beta
26
low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelPaaS host
15 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Site impersonating Facebook on a Cloudflare Pages subdomain whose download-suggestive name may indicate credential harvesting or malicious content delivery under the Facebook brand. Flagged as malicious by urlscan, with the brand embedded directly in the apex label and no security headers present.
urlscan.ioBrand in domain labelKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-04 · confidence 74%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
IP
172.66.47.57
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Google Trust Services
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Submit to blocklists