public company · US
Meta (Facebook)
Meta Platforms, Inc.
Facebook, Instagram and WhatsApp.
- Primary official domain
- facebook.com
- Reviewed official domains
- 5 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
152
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
174
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 1/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
face-book[.]com[.]vnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive206.206.126.131checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebook-badge[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive216.198.79.6564.29.17.65checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebook-faq[.]seMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive81.170.159.187checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
www[.]facebook-premium-verified[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive216.198.79.6564.29.17.65checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
metapay[.]facebook-secure[.]shopMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
www[.]facebook-verify-fanpage[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebookcustomer-service[.]comMail: MX · via google.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.61.117172.67.209.1592606:4700:3032::ac43:d19f2606:4700:3035::6815:3d75checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebookfanpage[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive18.208.88.15798.84.224.111checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
h5[.]facebookmeta[.]ccMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.14.126172.67.203.912606:4700:3032::ac43:cb5b2606:4700:3034::6815:e7echecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebookpagemanagement[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.88.103172.67.176.812606:4700:3037::6815:58672606:4700:3037::ac43:b051checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebookshops[.]bestMail: MXSPF · via gandi.net · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.36.24172.67.184.512606:4700:3030::ac43:b8332606:4700:3034::6815:2418checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
faq-whatsapp-center[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive137.220.156.33checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
file-whatsappn[.]hl[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.51.94172.67.178.302606:4700:3031::6815:335e2606:4700:3037::ac43:b21echecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whatsapp[.]glutoes[.]comMail: MXDMARC · via google.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive51.89.231.112checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
web[.]h-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive156.252.40.23checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
me[.]h5-whatsapp-zn[.]hl[.]cn2 hostnames under h5-whatsapp-zn.hl.cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive192.197.113.111checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
seveice[.]h5-whatsapp-zn[.]hl[.]cn | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive192.197.113.111checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
charliemanarix-facebook-login-clone-spy-edition[.]static[.]hf[.]spaceMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.226.94.8013.226.94.6313.226.94.213.226.94.792600:9000:21f9:1e00:1f:bef0:1ac0:93a12600:9000:21f9:7000:1f:bef0:1ac0:93a1checked 2026-10-19 04:48 UTC | 1 source · 1 record | Details |
hll-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive156.252.42.3checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebook[.]hotzxgirl[.]onlineMail: MXSPFDMARC · via cloudflare.net · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive216.198.79.6564.29.17.65checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
validatewhatsapp[.]hstn[.]meMail: MXSPF · via ifastnet.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.27.134.24checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
web[.]i-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.221.8.129checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
app[.]whatsapp[.]ih[.]hl[.]cn5 hostnames under ih.hl.cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.195.74.69checked 2026-10-19 04:47 UTC | 1 source · 1 record | Details |
m[.]whatsapp[.]ih[.]hl[.]cn | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.195.74.69checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
wap[.]whatsapp[.]ih[.]hl[.]cn | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.195.74.69checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
web[.]whatsapp[.]ih[.]hl[.]cn | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.195.74.69checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whatsapp[.]ih[.]hl[.]cn | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.195.74.69checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
imnew-whatsapp[.]hl[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive156.234.58.212156.234.58.213checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebook-spotted-slike[.]infy[.]clickMail: MXSPF · via ifastnet11.org · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.27.134.200checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
instagram-client-business-service-support[.]phMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive45.79.222.138checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
152 registrable domains · 160 hostnames · page 2 of 7← PreviousNext →
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.