public company · US
Meta (Facebook)
Meta Platforms, Inc.
Facebook, Instagram and WhatsApp.
- Primary official domain
- facebook.com
- Reviewed official domains
- 5 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
152
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
174
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 1/10 lookups · Mail: Not checked · checked 2026-10-18 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- facebookinstagrammetaplatformswhatsapp
- Label aliases
- Facebook · Instagram · Meta Platforms · WhatsApp · Meta
- Official domains
- meta.com · facebook.com · fb.com · instagram.com · whatsapp.com (all)
- Generated spellings
- 400 tracked · 8 observed somewhere · 392 not observed (all)
- Can receive mail
- 3 spellings and 32 reported domains publish MX records · mail at Google 6 · iFastNet 4 · Cloudflare Email Routing (mail forwarding) 2 · 22 more (5 spellings and 152 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
facebook[.]usaserverlogin[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive91.195.240.94SEDO-AS (AS47846) · DEchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whatsapp[.]viewclass[.]comMail: MXSPFDMARC · checked 2026-10-19mail at Google (consumer mailbox) · DMARC policy quarantine · sends via mxsspf.sendpulse.com, mxsmtp.sendpulse.com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.14.143CloudflareCloudflare (AS13335) · US172.67.159.173CloudflareCloudflare (AS13335) · US2606:4700:3034::6815:e8fCloudflareCloudflare (AS13335) · US2606:4700:3037::ac43:9fadCloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
w-e-b-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.221.8.152ASLINE-AS-AP ASLINE LIMITED (AS137951) · HKchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
w-p-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.221.8.155ASLINE-AS-AP ASLINE LIMITED (AS137951) · HKchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
wanshua-whatsapp[.]hk[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.96.98CloudflareCloudflare (AS13335) · US172.67.176.145CloudflareCloudflare (AS13335) · US2606:4700:3035::6815:6062CloudflareCloudflare (AS13335) · US2606:4700:3037::ac43:b091CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
zh[.]wave-whatsapp[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.31.216CloudflareCloudflare (AS13335) · US172.67.179.254CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:b3feCloudflareCloudflare (AS13335) · US2606:4700:3033::6815:1fd8CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
facebook[.]apps[.]waypoint[.]agencyMail: MXSPFDMARC · checked 2026-10-19mail at Google (consumer mailbox) · DMARC policy none (monitor only) · sends via Google, Amazon SES, 49245911.spf01.hubspotemail.net | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive158.69.193.122OVHOVH (AS16276) · FRvps-2245e0fd.vps.ovh.cachecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
wch-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive154.221.8.132ASLINE-AS-AP ASLINE LIMITED (AS137951) · HKchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
web-ob-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive45.195.124.112AROSS-AS (AS400619) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
web-whatsapp[.]coMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
web-xml-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive45.207.216.13COGNETCLOUD (AS401696) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
web-zh-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive156.239.9.106CCSB-AS-AP CORENET CLOUD SDN. BHD. (AS154321) · MYchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
instagram[.]webpromotion-business[.]siteMail: MXSPF · checked 2026-10-19mail at webpromotion-business.site · sends via Xserver | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive162.43.122.184XSERVER Xserver Inc. (AS131965) · JPsv14583.xserver.jpchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
wha-app-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive156.252.40.18GNETINC-AS-AP GNET INC. (AS9294) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
what-im-whatsapp[.]hl[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.11.110CloudflareCloudflare (AS13335) · US172.67.191.230CloudflareCloudflare (AS13335) · US2606:4700:3033::6815:b6eCloudflareCloudflare (AS13335) · US2606:4700:3033::ac43:bfe6CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
what-im-whatsappp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.45.214CloudflareCloudflare (AS13335) · US172.67.219.51CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:db33CloudflareCloudflare (AS13335) · US2606:4700:3035::6815:2dd6CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whats-hk-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whats-vn-whatsapp[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whatsapp-admin[.]netMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whatsapp-grupo[.]onlineMail: MXSPFDMARC · checked 2026-10-19mail at whatsapp-grupo.online · DMARC policy none (monitor only) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive200.111.84.91ENTEL CHILE S.A. (AS27651) · CLserver17.privateserver.ccchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
web[.]whatsapp-net[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive156.252.40.30GNETINC-AS-AP GNET INC. (AS9294) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
siyarata-assets-workbench[.]whatsappapk[.]orgMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive136.110.11.34Google CloudGoogle Cloud (AS396982) · US34.11.110.136.bc.googleusercontent.comchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whatsappbutton[.]ruMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.68.226CloudflareCloudflare (AS13335) · US172.67.199.52CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:44e2CloudflareCloudflare (AS13335) · US2606:4700:3032::ac43:c734CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whatsappcampaign[.]onlineMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive216.198.79.1Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
whatsappdwar[.]comMail: MXSPFDMARC · checked 2026-10-19mail at Hostinger (web / mail hosting) · DMARC policy none (monitor only) · sends via Hostinger | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive216.198.79.65Amazon Web ServicesAmazon Web Services (AS16509) · US64.29.17.65Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
152 registrable domains · 160 hostnames · page 5 of 7← PreviousNext →
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.