register-facebook[.]blogspot[.]com

register-facebook.blogspot.com is a tenant hostname on MarkMonitor, Inc., not a separately registered domain. PhishDestroy first observed the hostname on Mar 1, 2026. The hostname explicitly references Facebook; stored content metadata identifies the same apparent target. The captured page title is “facebook”. Page analysis recorded additional brand references to Google. Stored page analysis classifies the content as social media phishing. Current evidence score: 100/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, Phishunt, DNS security resolvers, and Cloudflare Radar. VirusTotal recorded 17 detections among 91 engines: ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, Sophos, VIPRE, Webroot on Jul 27, 2026 at 02:34 UTC. Phishunt listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 22:20 UTC. DNS security checks returned 6 blocking results across 14 tested policies: Brand Facebook, Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories security threats and phishing; its verdict timestamp was not retained. Non-positive and contextual checks: ScamAdviser assigned a trust score of 1/100 (Very Likely Unsafe); no observation timestamp was retained. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 1, 2026 at 02:26 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:49 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 22:02 UTC. MarkMonitor, Inc. is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 142.250.186.65 on AS15169 (Google LLC). The recorded endpoint location is Frankfurt am Main, DE. The IP and ASN identify shared MarkMonitor, Inc. infrastructure, not the tenant operator. The stored server header is GSE. DOM analysis on Mar 23, 2026 at 23:11 UTC returned 93/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by WE2 with validity through Apr 27, 2026; checked Mar 15, 2026 at 05:42 UTC.

The content indicators and 4 positive source findings support the current Facebook-themed social media phishing classification.