public company · US

Meta (Facebook)

Meta Platforms, Inc.

Facebook, Instagram and WhatsApp.

Primary official domain
facebook.com
Reviewed official domains
5 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
152
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
174
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 1/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
facebookinstagrammetaplatformswhatsapp
Label aliases
Facebook · Instagram · Meta Platforms · WhatsApp · Meta
Official domains
meta.com · facebook.com · fb.com · instagram.com · whatsapp.com (all)
Generated spellings
400 tracked · 3 observed somewhere · 397 not observed (all)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
pc[.]instagram-e[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.216.251.8checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
lm[.]instagram-f[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.216.251.9checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
app[.]instagram-g[.]com[.]cn2 hostnames under instagram-g.com.cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-18 22:25 UTC
1 source · 1 recordDetails
pc[.]instagram-g[.]com[.]cn
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
instagram-my[.]ruMail: MXSPF · via timeweb.ru · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.114.247.432a03:6f00:6:1::b972:f72bchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
instagramnewapp[.]irMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
instagram[.]jessica-garrido[.]frMail: MXSPFDMARC · via jessica-garrido.fr · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive109.234.162.167checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
web[.]whatsapp[.]jo[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive168.76.144.218checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
facebookdevelopercircles[.]lapieza[.]ioMail: MXSPFDMARC · via amazonaws.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive151.101.1.195151.101.65.195checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
whatsapp-tools[.]lateinos[.]com[.]brMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.253.122.1212607:f8b0:4004:c09::79checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
whatsapper[.]leadball[.]ruMail: MXSPF · via yandex.net · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive37.140.192.612a00:f940:2:2:1:3:0:225checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
linkwhatsapp[.]onlineMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
llg-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive154.221.8.131checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
facebook[.]loginform[.]bizMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive16.170.215.85checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
lucky-whatsapp[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.90.73172.67.196.1402606:4700:3030::6815:5a492606:4700:3033::ac43:c48cchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
lucky-whatsappp[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.60.167172.67.198.1072606:4700:3033::ac43:c66b2606:4700:3036::6815:3ca7checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
instagram[.]memepage[.]ioMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.86.5172.67.213.812606:4700:3033::ac43:d5512606:4700:3035::6815:5605checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
facebook[.]meweb[.]kzMail: MXSPF · via meweb.kz · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive195.210.46.272a00:5da0:1000::108checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
mface-book[.]com[.]vnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive206.206.126.131checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
mfacebook[.]vnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive206.206.126.131checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
mfacebooks[.]vnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive206.206.126.131checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
instagram[.]com[.]minttaskapp[.]comMail: MXSPF · via minttaskapp.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
web[.]whatsapp[.]com[.]mk[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive168.76.145.218checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
whatsapp[.]nm[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive154.195.71.90checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
whatsapp[.]nr[.]hl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive154.195.71.89checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
nvi-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive156.252.42.18checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.