Security Scan Report: todo--facebook.blogspot.com

Redirected to:
https://todo--facebook.blogspot.com/
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 1 domain to perform 1 HTTP transaction. The main domain is blogspot.com and was registered 26 years ago.

Submitted URL: http://todo--facebook.blogspot.com

Effective URL:
https://todo--facebook.blogspot.com/
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

A blogspot subdomain branded as 'Facebook' with a single-source phishing threat-intel hit on its own domain and no forms — brand impersonation/lure page, not the real Facebook. Avoid it.

Risk Factors (5)
Content-malware (phishing) threat-intel match on the primary domain
Impersonation of the Facebook brand on a non-official blogspot.com subdomain
Unranked domain with no established reputation
Hostname is a decorator/homoglyph-style construction ('todo--facebook') associated with lure pages
Scanner-vs-client content mismatch (bot protection bypassed) combined with brand impersonation
Domain age information unavailable

Details

Page Title

Facebook

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'todo--facebook.blogspot.com' is registered with subdomain 'todo--facebook'. The core label 'blogspot' covers 8 characters containing two vowels alongside 6 consonants. Tokenizing the label suggests 1 word: blogspot. No strong language cues emerged from the frequency lists.

Screenshot

Google Q Search Google or type a URL © fe eo + Web Store Add shorteut @ Customize Chrome

Page Load Overview

75.10s
Total Load Time
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:8 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software70% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
70%
e-commerce shopping
58%
documentation technical
52%
news media journalism
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1192.178.183.132Google · CDNUnited States
AS15169Google LLC
0142.251.14.191Google · CDNUnited States
AS15169Google LLC
0174.132.149.5Azure · CLOUDUnited Kingdom
AS8075Microsoft Corporation
0142.250.154.139Google · CDNUnited States
AS15169Google LLC
0142.250.154.132Google · CDNUnited States
AS15169Google LLC
0142.251.14.132Google · CDNUnited States
AS15169Google LLC
0104.20.20.192Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.110.191Google · CDNUnited States
AS15169Google LLC
0172.67.174.110Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
110--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19EE36BF596F96398508B87E5DB661864AF2E10FB3688C194712D9FE09F138D8CB87CC0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Xo1KIIkPaonX5xf/N6cw15UxDTtq6IkPacnVfxf/N6cw15UxDTtNQHhfPVk1/Jst:XP42AZOq2AZyH7k1/JseN8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:150743:sEKMkOWqSgGQGFDuhBQYaOKAIxlYUSiCAQgAjiUDqAQCqgeQCywiBTespFEILCEE2QlBIAgEQ2CFAEHLXZWiIDWgEYkwIFCE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c7c3e7fffffffe
Perceptual Hash:f722558add88dd88
Difference Hash:080c1e0800000000
Wavelet Hash:fce4c0e40c0c0d0c
Color Hash:N/A

Other Hashes

Crop Resistant:080c1e0800000000

Scan History

Scan history not available

Unable to load historical scan data