public company · US

Meta (Facebook)

Meta Platforms, Inc.

Facebook, Instagram and WhatsApp.

Primary official domain
facebook.com
Reviewed official domains
5 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
152
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
174
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 1/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
facebookinstagrammetaplatformswhatsapp
Label aliases
Facebook · Instagram · Meta Platforms · WhatsApp · Meta
Official domains
meta.com · facebook.com · fb.com · instagram.com · whatsapp.com (all)
Generated spellings
400 tracked · 3 observed somewhere · 397 not observed (all)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
instagram[.]123zoeken[.]beMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive79.137.95.102001:41d0:302:1100::91echecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
web[.]api-cdn-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
apiim-whatsapp[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.13.134172.67.132.2162606:4700:3031::6815:d862606:4700:3035::ac43:84d8checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
web[.]app-www-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive154.221.9.153checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
appsu-whatsapp[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:47 UTC
1 source · 1 recordDetails
1613[.]bft-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive128.14.74.107128.14.74.124checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
block-whatsappp[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.67.214.70104.21.61.2002606:4700:3037::6815:3dc82606:4700:3032::ac43:d646checked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
facebook[.]bora-bora[.]dkMail: MXSPFDMARC · via google.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.26.0.242104.26.1.242172.67.68.76checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
bot-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive156.252.42.11checked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
cart-whatsapp[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.67.168.76104.21.94.1332606:4700:3030::6815:5e852606:4700:3037::ac43:a84cchecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
cdn-a-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
cdn-b-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
cdn-y-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:48 UTC
1 source · 1 recordDetails
login[.]facebook[.]checkyourbook[.]comMail: MXSPFDMARC · via zoho.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.107.74.34checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
web-whatsapp[.]cn-zh[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive168.76.148.203checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
connect-facebook-net[.]collectasone[.]comMail: MX · via dynadot.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive192.119.111.67checked 2026-10-19 04:49 UTC
1 source · 1 recordDetails
contact-on-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:49 UTC
1 source · 1 recordDetails
web[.]denglu-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive154.221.10.136checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
whatsapp[.]dir[.]com[.]myMail: MXSPF · via dir.com.my · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive129.121.72.72checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
instagram[.]dlscomunicacao[.]com[.]brMail: MXSPFDMARC · via dlscomunicacao.com.br · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive162.241.2.69checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
dream-whatsappp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.52.197172.67.203.592606:4700:3031::6815:34c52606:4700:3033::ac43:cb3bchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
drk-whatsapp[.]hk[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
e-b-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive154.221.8.150checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
email2whatsapp[.]com[.]brMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
ezy-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive156.252.41.15checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.