facebookuserlogin.blogspot.com

Facebook

https://facebookuserlogin.blogspot.com Access site

Screenshot

Investigate

Domain facebookuserlogin.blogspot.com0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 142.251.13.132

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://facebookuserlogin.blogspot.com

urlscan

Wayback

archive.today

Cert -

crt.sh

Censys

Google CT

Phishunt analysis Beta

43 high suspicion likely_phishingheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+3.7 Brand in domain label
+3.4 Shared IP cluster
+3.0 OpenPhish
+2.2 Country mismatch
+1.3 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+1.0 Young domain
+0.6 Long domain
+0.6 Login text in screenshot
+0.6 Suspicious TLD
+0.2 Obfuscated JavaScript
+0.1 External scripts
+0.1 Deep subdomain

22 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates Facebook using a Blogspot subdomain that embeds a same-origin form, consistent with credential harvesting for Facebook account logins. The domain encodes the brand name and login intent directly in its label. Independently confirmed malicious by both OpenPhish and urlscan.

Brand in domain labelSame-origin formOpenPhish

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-29 · confidence 92%

Domain & Network

Whois

Registrar MarkMonitor Inc.

Network

IP 142.251.13.132

Country