Finding

facebook[.]meweb[.]kz

URLs are shown as non-clickable text with parameters redacted. Share: https://domainspoof.org/findings/25215

Source claims

Listed by PhishDestroy Primary (content-verified)Present in latest snapshot
Indicator
facebook[.]meweb[.]kz
Source submitted
Not returned by source
Source verified
Not returned by source
Source online flag
Not returned by source
First observed by DomainSpoof
2026-10-18 20:32 UTC
Last successful snapshot with record
2026-10-19 10:07 UTC
Date basis
Observed in feed 2026-10-19
Attribution
Curated phishing domains from PhishDestroy (phishdestroy.io), content-verified subset, MIT licensed. Copyright (c) PhishDestroy. · terms

Company association (DomainSpoof's assessment)

Meta (Facebook) Possible association Brand in hostname
Rule
Distinctive brand token found in hostname (token v1.0)
Matched input
facebook
Confidence
0.60
Relationship
Impersonation candidate
Review
auto

A company match may be wrong. A targeted brand may differ from the site hosting the lure. Suggest a correction.

Hostname and DNS (DomainSpoof collector, DNS-over-HTTPS via Cloudflare)

Registrable domain
meweb[.]kz
Public suffix
kz
First / last observed by DomainSpoof in feeds
2026-10-18 / 2026-10-18
Latest DNS status
Resolves checked 2026-10-19 04:54 UTC
Registrar / RDAP
Not checked No RDAP service is published for .kz in the IANA bootstrap registry.
RDAP source
IANA RDAP bootstrap (no service) checked 2026-10-19 09:53 UTC
Presented TLS certificate
Not checked
TypeAnswersFirst DNS observationLatest DNS observation
AA 195.210.46.272026-10-19 04:54 UTC2026-10-19 04:54 UTC
AAAAAAAA 2a00:5da0:1000::1082026-10-19 04:54 UTC2026-10-19 04:54 UTC

Address facts

195.210.46.27
PSKZ-ALA (AS48716) · KZ · reverse DNS srv-plesk08.ps.kz (checked 2026-10-19 10:28 UTC)
2a00:5da0:1000::108
PSKZ-ALA (AS48716) · KZ · reverse DNS srv-plesk08.ps.kz (checked 2026-10-19 10:30 UTC)

Network (AS) and country come from the public iptoasn.com routing dataset; a reverse-DNS name is what the address's owner published. Neither shows who controls the hostname: shared hosting, CDNs and cloud providers put unrelated names behind one address.

Recent checks: A ok 2026-10-19 04:54 UTC · AAAA ok 2026-10-19 04:54 UTC

IP-list matches

No match in the IP lists checked. This does not establish safety.