secure-login-facebook.bolt.host

Facebook

https://secure-login-facebook.bolt.host Access site

Screenshot

Investigate

Domain secure-login-facebook.bolt.host26 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 172.67.75.9

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://secure-login-facebook.bolt.host

urlscan

Wayback

archive.today

Cert -

crt.sh

Censys

Google CT

Phishunt analysis Beta

34 medium suspicion suspiciousheuristic risk score · not a probability

Keyword matchBrand in subdomainBrand + login token

18 signals fired · detector v2.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates Facebook with the brand embedded in a bolt.host PaaS subdomain. A script-based exfiltration endpoint and matching phishing kit favicon indicate active credential harvesting. Flagged by both OpenPhish and URLScan. Traffic routed through Cloudflare.

OpenPhishScript exfil endpointBrand in subdomain

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-17 · confidence 92%

Domain & Network

Whois

Registrar Cloudflare, Inc.

Network

IP 172.67.75.9

Country