Phishing detection: facebookconfirm.blogspot.com
Facebook Investigate
Domain
facebookconfirm.blogspot.com0 CT hosts on apex
IP
142.250.154.132
URL
http://facebookconfirm.blogspot.com/?m=1
Cert
WE2
Phishunt analysis Beta
42
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +2.2 Country mismatch
- +2.0 Young domain
- +1.3 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.6 Long domain
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.2 Obfuscated JavaScript
- +0.1 External scripts
- +0.1 Deep subdomain
23 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site abuses a free Blogspot subdomain to impersonate Facebook, embedding the brand name directly in the domain apex to deceive users. Likely harvests account credentials or personal details. Confirmed malicious by OpenPhish and part of a known phishing cluster on Google infrastructure.
OpenPhishBrand in domain labelKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-12 · confidence 85%
Domain & Network
Whois
Registrar
MarkMonitor Inc.
Network
Country
Germany
Hosting
Google LLC
ASN
AS15169
TLS Cert
WE2
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise