Facebook

Social media United Statesfacebook.comRank 5 of the most impersonated
Cert findings · 24 h
7
Cert findings · 7 days
23
9 reported or listed · 14 on phishing hosts
Registered lookalikes
519
64 listed by a source or an address list
Official domains
40
verified from Facebook's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of Facebook's official domains (facebook.com, messenger.com, facebookmail.com) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

64 of the 519 are listed by a source or resolve to a listed address, checked hourly.

  1. faebook.co AU · AS133618 · Trellian Pty. LimitedLookalike of facebook.com · a dropped letter
    Parking page · Above.comMX present
    DetailsHide
    Domain
    faebook.co
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-20 · Dynadot Inc
    Addresses
    103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates faebook.co to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. ifacebook.news US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · an added character
    Amazon Web Services
    DetailsHide
    Domain
    ifacebook.news
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .news zone file, already registered
    Registered
    2026-09-18 · Tucows Domains Inc.
    Addresses
    13.248.148.104 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.20.46 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.148.104, 76.223.20.46): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. messenger.surf US · AS16509 · Amazon.com, Inc.2 addressesLookalike of messenger.com · the ending .surf
    Amazon Web Services
    DetailsHide
    Domain
    messenger.surf
    Spelling
    The name of messenger.com with the ending .surf
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-17 · Spaceship, Inc.
    Addresses
    34.216.117.25 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    54.149.79.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (34.216.117.25, 54.149.79.189): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. facebookupdate-mail.winLookalike of facebook.com · the name with an added word
    No address or mail server yet
    DetailsHide
    Domain
    facebookupdate-mail.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-16 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. facebookverify-mail.winLookalike of facebook.com · the name with an added word
    No address or mail server yet
    DetailsHide
    Domain
    facebookverify-mail.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-16 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. notification-verification-messenger.cfd VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · the name with an added word
    DetailsHide
    Domain
    notification-verification-messenger.cfd
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .cfd zone file, already registered
    Registered
    2026-09-13 · Dynadot Inc
    Addresses
    113.20.119.17 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. facebook-pay.click US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with the word “pay”
    Cloudflare
    DetailsHide
    Domain
    facebook-pay.click
    Spelling
    The name of facebook.com with the word “pay”
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-09-12 · Global Domain Group LLC
    Addresses
    104.21.84.206 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.197.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:c51b
    2606:4700:3035::6815:54ce
    Cloudflare
    Cloudflare (104.21.84.206, 172.67.197.27): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. facebook-pay.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with the word “pay”
    Cloudflare
    DetailsHide
    Domain
    facebook-pay.xyz
    Spelling
    The name of facebook.com with the word “pay”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-12 · Global Domain Group LLC
    Addresses
    104.21.12.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:83ee
    2606:4700:3034::6815:c2a
    Cloudflare
    Cloudflare (104.21.12.42, 172.67.131.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. faceebook.pub US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · a doubled letter
    Amazon Web Services
    DetailsHide
    Domain
    faceebook.pub
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .pub zone file, already registered
    Registered
    2026-09-12 · Tucows Domains Inc.
    Addresses
    13.248.148.104 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.20.46 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.148.104, 76.223.20.46): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. facebook-update.winLookalike of facebook.com · the name with the word “update”
    No address or mail server yet
    DetailsHide
    Domain
    facebook-update.win
    Spelling
    The name of facebook.com with the word “update”
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-10 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. facebook-updatemail.winLookalike of facebook.com · the name with the word “updatemail”
    MX present
    DetailsHide
    Domain
    facebook-updatemail.win
    Spelling
    The name of facebook.com with the word “updatemail”
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-10 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. facebook-verify.winLookalike of facebook.com · the name with the word “verify”
    MX present
    DetailsHide
    Domain
    facebook-verify.win
    Spelling
    The name of facebook.com with the word “verify”
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-10 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. facebookupdate.winLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    facebookupdate.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-10 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. facebook.org.twLookalike of facebook.com · the ending .org.tw
    No address or mail server yet
    DetailsHide
    Domain
    facebook.org.tw
    Spelling
    The name of facebook.com with the ending .org.tw
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-09-10 · GNAME.COM
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. facebooks.xinLookalike of facebook.com · an added character
    No address or mail server yet
    DetailsHide
    Domain
    facebooks.xin
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .xin zone file, already registered
    Registered
    2026-09-07 · GNAME.COM PTE. LTD.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. facebooksecurity.winLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    facebooksecurity.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-07 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. facebookverify.winLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    facebookverify.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-07 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. messenger-verification-notification.sbs VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · the name with an added word
    DetailsHide
    Domain
    messenger-verification-notification.sbs
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-09-07 · Dynadot Inc
    Addresses
    113.20.119.17 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. securityfacebook.reviews US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · the name with an added word
    Amazon Web Services
    DetailsHide
    Domain
    securityfacebook.reviews
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .reviews zone file, already registered
    Registered
    2026-09-07 · Name.com, Inc.
    Addresses
    64.29.17.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.65, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. securityfacebook.winLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    securityfacebook.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-07 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. securityfacebookmail.winLookalike of facebook.com · the name with an added word
    No address or mail server yet
    DetailsHide
    Domain
    securityfacebookmail.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-07 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. facebook.net.tw US · AS18186 · Nebula Global LLCLookalike of facebook.com · the ending .net.tw
    PhishDestroy CommunitySuspicious · high
    DetailsHide
    Domain
    facebook.net.tw
    Spelling
    The name of facebook.com with the ending .net.tw
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-09-06 · GNAME.COM
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    207.56.11.22 · United States · AS18186 NEBULA-GLOBAL - Nebula Global LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. notification-verification-messenger.xyz VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · the name with an added word
    DetailsHide
    Domain
    notification-verification-messenger.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-05 · Dynadot Inc
    Addresses
    113.20.119.17 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. messenger.click US · AS16509 · Amazon.com, Inc.Lookalike of messenger.com · the ending .click
    Amazon Web Services
    DetailsHide
    Domain
    messenger.click
    Spelling
    The name of messenger.com with the ending .click
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-04 · MAT BAO CORPORATION
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. messenger.mobi US · AS16509 · Amazon.com, Inc.2 addressesLookalike of messenger.com · the ending .mobi
    Parking page · Afternic
    DetailsHide
    Domain
    messenger.mobi
    Spelling
    The name of messenger.com with the ending .mobi
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-01 · Sav.com, LLC - 37
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates messenger.mobi to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. messenger.studio DE · AS8560 · IONOS-AS IONOS SELookalike of messenger.com · the ending .studio
    IONOSMX present
    DetailsHide
    Domain
    messenger.studio
    Spelling
    The name of messenger.com with the ending .studio
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-08-31 · IONOS SE
    Addresses
    217.154.17.0 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.154.17.0): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    messenger-studio.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. messenger-supports-verification-ssecurity.autos DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of facebook.com · the name with an added word
    Parking page · ParkingCrew (Team Internet)
    DetailsHide
    Domain
    messenger-supports-verification-ssecurity.autos
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .autos zone file, already registered
    Registered
    2026-08-21 · Dynadot Inc
    Addresses
    185.53.179.128 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.128): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. messenger-verification-mariahelicaa132.xyz VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · the name with an added word
    DetailsHide
    Domain
    messenger-verification-mariahelicaa132.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-21 · Dynadot Inc
    Addresses
    113.20.119.17 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. verification-supports-messenger-ssecurity.homes FR · AS16276 · OVH OVH SASLookalike of facebook.com · the name with an added word
    OVH
    DetailsHide
    Domain
    verification-supports-messenger-ssecurity.homes
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .homes zone file, already registered
    Registered
    2026-08-21 · Dynadot Inc
    Addresses
    15.235.168.2 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.235.168.2): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. messenger.ltd US · AS2635 · Automattic, Inc2 addressesLookalike of messenger.com · the ending .ltd
    MX present
    DetailsHide
    Domain
    messenger.ltd
    Spelling
    The name of messenger.com with the ending .ltd
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-08-20 · Automattic Inc.
    Addresses
    192.0.78.24 · United States · AS2635 AUTOMATTIC - Automattic, Inc
    192.0.78.25 · United States · AS2635 AUTOMATTIC - Automattic, Inc
    MX
    smtp-fwd.wordpress.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. verification-messenger-ads-security-supports.click FR · AS16276 · OVH OVH SASLookalike of facebook.com · the name with an added word
    OVH
    DetailsHide
    Domain
    verification-messenger-ads-security-supports.click
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-08-19 · Dynadot, LLC
    Addresses
    15.235.168.2 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.235.168.2): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. messenger-supporst-verification.click VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · the name with an added word
    DetailsHide
    Domain
    messenger-supporst-verification.click
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-08-18 · Dynadot, LLC
    Addresses
    113.20.119.17 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. facebook-security.dateLookalike of facebook.com · the name with the word “security”
    MX present
    DetailsHide
    Domain
    facebook-security.date
    Spelling
    The name of facebook.com with the word “security”
    First found
    2026-11-01 · the day we first found it in the .date zone file, already registered
    Registered
    2026-08-16 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. facebook-security.winLookalike of facebook.com · the name with the word “security”
    MX present
    DetailsHide
    Domain
    facebook-security.win
    Spelling
    The name of facebook.com with the word “security”
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-08-16 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. fafcebook.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · an added character
    Parking page · Afternic
    DetailsHide
    Domain
    fafcebook.xyz
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-16 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates fafcebook.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. focebook.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · a changed character
    Parking page · Afternic
    DetailsHide
    Domain
    focebook.xyz
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-16 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates focebook.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. facebbok.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · a changed character
    Parking page · Afternic
    DetailsHide
    Domain
    facebbok.xyz
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-08-15 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates facebbok.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. messenger-verification-security.live VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · the name with an added word
    DetailsHide
    Domain
    messenger-verification-security.live
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-12 · Dynadot Inc
    Addresses
    113.20.119.17 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. notification-messenger-verification.live VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · the name with an added word
    DetailsHide
    Domain
    notification-messenger-verification.live
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-12 · Dynadot Inc
    Addresses
    113.20.119.17 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. faceb00kmail.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebookmail.com · similar-looking characters
    CloudflareMX present
    DetailsHide
    Domain
    faceb00kmail.com
    Spelling
    Spelled like facebookmail.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-08-12 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    104.21.40.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.145 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:8a91
    2606:4700:3033::6815:28c9
    Cloudflare
    Cloudflare (104.21.40.201, 172.67.138.145): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mail.mailmomy.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. verification-security-ads-messenger.art VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · the name with an added word
    DetailsHide
    Domain
    verification-security-ads-messenger.art
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .art zone file, already registered
    Registered
    2026-08-11 · Dynadot Inc
    Addresses
    113.20.119.17 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. afc-ebook.org CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · two letters swapped
    HostingerMX present
    DetailsHide
    Domain
    afc-ebook.org
    Spelling
    Spelled like facebook.com with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-08-07 · HOSTINGER operations, UAB
    Addresses
    72.60.68.181 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (72.60.68.181): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. facbook.mom US · AS16509 · Amazon.com, Inc.3 addressesLookalike of facebook.com · a dropped letter
    Amazon Web Services
    DetailsHide
    Domain
    facbook.mom
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .mom zone file, already registered
    Registered
    2026-07-29 · Porkbun LLC
    Addresses
    207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. facebook-login-auth.xyzLookalike of facebook.com · the name with the word “login-auth”
    No address or mail server yet
    DetailsHide
    Domain
    facebook-login-auth.xyz
    Spelling
    The name of facebook.com with the word “login-auth”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-29 · NameSilo, LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. facebooks.top US · AS16509 · Amazon.com, Inc.Lookalike of facebook.com · an added character
    Parking page · Dynadot parkingMX present
    DetailsHide
    Domain
    facebooks.top
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-07-23 · Dynadot LLC
    Addresses
    54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
    Parking page · Dynadot parking
    Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
    MX
    parkmail.dynadot.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. facebook.yunLookalike of facebook.com · the ending .yun
    No address or mail server yet
    DetailsHide
    Domain
    facebook.yun
    Spelling
    The name of facebook.com with the ending .yun
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-07-13 · 阿里云计算有限公司
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. messenger.xin SG · AS139341 · ACE2 addressesLookalike of messenger.com · the ending .xin
    DetailsHide
    Domain
    messenger.xin
    Spelling
    The name of messenger.com with the ending .xin
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-07-12 · Dominet (HK) Limited
    Addresses
    43.169.15.163 · Singapore · AS139341 ACE-AS-AP - ACE
    240d:c010:75:1::119
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. messenger.baby US · AS13335 · Cloudflare, Inc.4 addressesLookalike of messenger.com · the ending .baby
    CloudflareMX present
    DetailsHide
    Domain
    messenger.baby
    Spelling
    The name of messenger.com with the ending .baby
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-07-06 · NameCheap, Inc.
    Addresses
    104.21.4.20 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.131.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:414
    2606:4700:3032::ac43:838d
    Cloudflare
    Cloudflare (104.21.4.20, 172.67.131.141): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    eforward1.registrar-servers.com
    eforward2.registrar-servers.com
    eforward3.registrar-servers.com
    eforward4.registrar-servers.com
    eforward5.registrar-servers.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. messenger.lifestyle US · AS13335 · Cloudflare, Inc.4 addressesLookalike of messenger.com · the ending .lifestyle
    CloudflareMX present
    DetailsHide
    Domain
    messenger.lifestyle
    Spelling
    The name of messenger.com with the ending .lifestyle
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-07-06 · NAMECHEAP
    Addresses
    104.21.42.103 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.204.248 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:ccf8
    2606:4700:3033::6815:2a67
    Cloudflare
    Cloudflare (104.21.42.103, 172.67.204.248): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    eforward1.registrar-servers.com
    eforward2.registrar-servers.com
    eforward3.registrar-servers.com
    eforward4.registrar-servers.com
    eforward5.registrar-servers.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. facebook-update.click DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of facebook.com · the name with the word “update”
    Parking page · ParkingCrew (Team Internet)
    DetailsHide
    Domain
    facebook-update.click
    Spelling
    The name of facebook.com with the word “update”
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-07-05 · Dynadot, LLC
    Addresses
    185.53.179.128 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.128): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. megaverified.click US · AS22612 · Namecheap, Inc.Lookalike of facebook.com · a changed character
    NamecheapMX present
    DetailsHide
    Domain
    megaverified.click
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-07-04 · NAMECHEAP
    Addresses
    69.57.163.170 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
    Namecheap
    Namecheap (69.57.163.170): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    eforward1.registrar-servers.com
    eforward2.registrar-servers.com
    eforward3.registrar-servers.com
    eforward4.registrar-servers.com
    eforward5.registrar-servers.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. facebookpay.cfd US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    facebookpay.cfd
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .cfd zone file, already registered
    Registered
    2026-06-25 · Dynadot Inc
    Addresses
    104.21.68.166 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:c4e5
    2606:4700:3031::6815:44a6
    Cloudflare
    Cloudflare (104.21.68.166, 172.67.196.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. facebookpay.lol US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    facebookpay.lol
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .lol zone file, already registered
    Registered
    2026-06-25 · Dynadot Inc
    Addresses
    104.21.20.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.192.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:c00f
    2606:4700:3035::6815:1462
    Cloudflare
    Cloudflare (104.21.20.98, 172.67.192.15): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. facebookpayment.cfd US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    facebookpayment.cfd
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .cfd zone file, already registered
    Registered
    2026-06-25 · Dynadot Inc
    Addresses
    104.21.91.215 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.120 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:5bd7
    2606:4700:3036::ac43:b478
    Cloudflare
    Cloudflare (104.21.91.215, 172.67.180.120): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. facebookpayment.lol US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    facebookpayment.lol
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .lol zone file, already registered
    Registered
    2026-06-25 · Dynadot Inc
    Addresses
    104.21.66.223 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:a4b5
    2606:4700:3034::6815:42df
    Cloudflare
    Cloudflare (104.21.66.223, 172.67.164.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. megaverified.store US · AS22612 · Namecheap, Inc.Lookalike of facebook.com · a changed character
    Registry lookup queuedNamecheapMX present
    DetailsHide
    Domain
    megaverified.store
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .store zone file, already registered
    Registered
    2026-06-24 · GoDaddy.com, LLC
    Addresses
    198.54.120.199 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
    Namecheap
    Namecheap (198.54.120.199): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1-hosting.jellyfish.systems
    mx2-hosting.jellyfish.systems
    mx3-hosting.jellyfish.systems
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. faceboook.app PL · AS201814 · Mevspace MEVSPACE sp. z o.o.3 addressesLookalike of facebook.com · a doubled letter
    DetailsHide
    Domain
    faceboook.app
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-22 · Tucows Domains Inc
    Addresses
    149.50.97.234 · Poland · AS201814 Mevspace MEVSPACE sp. z o.o.
    2606:4700:3030::ac43:bbd7
    2606:4700:3032::6815:38c4
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. facebook-verified-badge.center US · AS16509 · Amazon.com, Inc.Lookalike of facebook.com · the name with the word “verified-badge”
    Amazon Web Services
    DetailsHide
    Domain
    facebook-verified-badge.center
    Spelling
    The name of facebook.com with the word “verified-badge”
    First found
    2026-11-01 · the day we first found it in the .center zone file, already registered
    Registered
    2026-06-21 · Cloudflare, Inc
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. facebook-verified-badge.support US · AS16509 · Amazon.com, Inc.Lookalike of facebook.com · the name with the word “verified-badge”
    Amazon Web ServicesMX present
    DetailsHide
    Domain
    facebook-verified-badge.support
    Spelling
    The name of facebook.com with the word “verified-badge”
    First found
    2026-11-01 · the day we first found it in the .support zone file, already registered
    Registered
    2026-06-21 · Cloudflare, Inc
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. faceb00k.xyz CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · similar-looking characters
    Hostinger
    DetailsHide
    Domain
    faceb00k.xyz
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-21 · HOSTINGER operations, UAB
    Addresses
    76.13.18.252 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (76.13.18.252): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. faceboo.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · a dropped letter
    Cloudflare
    DetailsHide
    Domain
    faceboo.xyz
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-18 · Global Domain Group LLC
    Addresses
    104.21.19.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.186.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:ba21
    2606:4700:3035::6815:1374
    Cloudflare
    Cloudflare (104.21.19.116, 172.67.186.33): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. vacebook.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · a letter from a neighbouring key
    Parking page · Afternic
    DetailsHide
    Domain
    vacebook.xyz
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-17 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates vacebook.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. facbook.in US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · a dropped letter
    Cloudflare
    DetailsHide
    Domain
    facbook.in
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-10 · Spaceship, Inc.
    Addresses
    104.21.26.189 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1abd
    2606:4700:3037::ac43:8a5d
    Cloudflare
    Cloudflare (104.21.26.189, 172.67.138.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. facebookpayment.world US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · the name with an added word
    Registry lookup queuedParking page · Afternic
    DetailsHide
    Domain
    facebookpayment.world
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .world zone file, already registered
    Registered
    2026-06-06 · GoDaddy.com, LLC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates facebookpayment.world to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. messenger.expert DE · AS51191 · XIRRA Core-Backbone GmbH2 addressesLookalike of messenger.com · the ending .expert
    MX present
    DetailsHide
    Domain
    messenger.expert
    Spelling
    The name of messenger.com with the ending .expert
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-06-04 · Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
    Addresses
    130.185.109.78 · Germany · AS51191 XIRRA Core-Backbone GmbH
    2a01:4a0:2002:4:a26d:4d48:f6ea:981a
    MX
    messenger.expert
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. messenger.enterprises US · AS13335 · Cloudflare, Inc.4 addressesLookalike of messenger.com · the ending .enterprises
    CloudflareMX present
    DetailsHide
    Domain
    messenger.enterprises
    Spelling
    The name of messenger.com with the ending .enterprises
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-05-27 · Cloudflare, Inc
    Addresses
    104.21.82.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:521b
    2606:4700:3036::ac43:9773
    Cloudflare
    Cloudflare (104.21.82.27, 172.67.151.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx01.mail.icloud.com
    mx02.mail.icloud.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. facesbook.info US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · an added character
    Amazon Web Services
    DetailsHide
    Domain
    facesbook.info
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-05-25 · Porkbun LLC
    Addresses
    207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. faceb00k.fr IT · AS39729 · REGISTER-AS REGISTER S.P.A.Lookalike of facebook.com · similar-looking characters
    MX present
    DetailsHide
    Domain
    faceb00k.fr
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-23 · AMEN / Agence des Médias Numériques
    Addresses
    81.88.57.68 · Italy · AS39729 REGISTER-AS REGISTER S.P.A.
    MX
    mail-fr.securemail.pro
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. fecebook.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · a changed character
    Cloudflare
    DetailsHide
    Domain
    fecebook.app
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-05-22 · Dynadot LLC.
    Addresses
    104.21.19.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1356
    2606:4700:3033::ac43:b9b0
    Cloudflare
    Cloudflare (104.21.19.86, 172.67.185.176): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. 0facebook.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · an added character
    Cloudflare
    DetailsHide
    Domain
    0facebook.app
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-05-18 · Dynadot LLC.
    Addresses
    104.21.44.156 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.41 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:2c9c
    2606:4700:3033::ac43:c929
    Cloudflare
    Cloudflare (104.21.44.156, 172.67.201.41): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. facebooks.cyou US · AS14061 · DigitalOcean, LLC2 addressesLookalike of facebook.com · an added character
    DigitalOcean
    DetailsHide
    Domain
    facebooks.cyou
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .cyou zone file, already registered
    Registered
    2026-05-12 · NicNames, Inc.
    Addresses
    159.203.143.218 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    2604:a880:800:14:0:1:225d:c000
    DigitalOcean
    DigitalOcean (159.203.143.218): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. facebookk.cyou US · AS14061 · DigitalOcean, LLC2 addressesLookalike of facebook.com · a doubled letter
    DigitalOcean
    DetailsHide
    Domain
    facebookk.cyou
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-12 · NicNames, Inc.
    Addresses
    159.203.143.218 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    2604:a880:800:14:0:1:225d:c000
    DigitalOcean
    DigitalOcean (159.203.143.218): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. facebooks.org GB · AS34119 · WILDCARD-AS Wildcard UK Lim…Lookalike of facebook.com · an added character
    MX present
    DetailsHide
    Domain
    facebooks.org
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-06 · Dynu Systems Incorporated
    Addresses
    185.27.134.151 · United Kingdom · AS34119 WILDCARD-AS Wildcard UK Limited
    MX
    mx.facebooks.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. messenger.ren US · AS16509 · Amazon.com, Inc.Lookalike of messenger.com · the ending .ren
    Amazon Web Services
    DetailsHide
    Domain
    messenger.ren
    Spelling
    The name of messenger.com with the ending .ren
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-05-02 · 烟台帝思普网络科技有限公司
    Addresses
    35.93.207.44 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (35.93.207.44): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. messenger.contactLookalike of messenger.com · the ending .contact
    No address or mail server yet
    DetailsHide
    Domain
    messenger.contact
    Spelling
    The name of messenger.com with the ending .contact
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-30 · Cloudflare, Inc
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. faceb00k2.sbs CN · AS132203 · Tencent Building, Kejizhong…Lookalike of facebook.com · similar-looking characters
    Tencent CloudMX present
    DetailsHide
    Domain
    faceb00k2.sbs
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-04-29 · Dynadot Inc
    Addresses
    43.165.4.133 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.165.4.133): a cloud provider. It rents servers and addresses to its customers.
    MX
    route3.mx.cloudflare.net
    route2.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. faceb00k.click CN · AS132203 · Tencent Building, Kejizhong…Lookalike of facebook.com · similar-looking characters
    Tencent CloudMX present
    DetailsHide
    Domain
    faceb00k.click
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-29 · Dynadot, LLC
    Addresses
    43.165.4.133 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.165.4.133): a cloud provider. It rents servers and addresses to its customers.
    MX
    route3.mx.cloudflare.net
    route1.mx.cloudflare.net
    route2.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. faceboook.co AU · AS133618 · Trellian Pty. LimitedLookalike of facebook.com · a doubled letter
    Parking page · Above.comMX present
    DetailsHide
    Domain
    faceboook.co
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-28 · Name.com, Inc.
    Addresses
    103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates faceboook.co to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. facebook71-inf-ord-id2126429.cfd US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    facebook71-inf-ord-id2126429.cfd
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .cfd zone file, already registered
    Registered
    2026-04-27 · Gname.com Pte. Ltd.
    Addresses
    104.21.51.9 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.95 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:3309
    2606:4700:3036::ac43:d85f
    Cloudflare
    Cloudflare (104.21.51.9, 172.67.216.95): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. facebooks.business US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · an added character
    Cloudflare
    DetailsHide
    Domain
    facebooks.business
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .business zone file, already registered
    Registered
    2026-04-27 · Dynadot Inc
    Addresses
    104.21.95.26 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.75 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:5f1a
    2606:4700:3033::ac43:a94b
    Cloudflare
    Cloudflare (104.21.95.26, 172.67.169.75): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. metaforbusinesssupport.center DE · AS47846 · SEDO-AS SEDO GmbHLookalike of facebook.com · the name with an added word
    PhishDestroy CommunitySuspicious · mediumParking page · Sedo
    DetailsHide
    Domain
    metaforbusinesssupport.center
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .center zone file, already registered
    Registered
    2026-04-26 · Name.com, Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. messenger.wtf US · AS13335 · Cloudflare, Inc.4 addressesLookalike of messenger.com · the ending .wtf
    Cloudflare
    DetailsHide
    Domain
    messenger.wtf
    Spelling
    The name of messenger.com with the ending .wtf
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-16 · Spaceship, Inc.
    Addresses
    104.21.10.232 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.203 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:ae8
    2606:4700:3034::ac43:a4cb
    Cloudflare
    Cloudflare (104.21.10.232, 172.67.164.203): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. messenger.agency US · AS16509 · Amazon.com, Inc.2 addressesLookalike of messenger.com · the ending .agency
    Parking page · Afternic
    DetailsHide
    Domain
    messenger.agency
    Spelling
    The name of messenger.com with the ending .agency
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-15 · Sav.com, LLC - 22
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates messenger.agency to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. face-b00k.beauty DE · AS47846 · SEDO-AS SEDO GmbHLookalike of facebook.com · similar-looking characters
    Parking page · Sedo
    DetailsHide
    Domain
    face-b00k.beauty
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .beauty zone file, already registered
    Registered
    2026-04-10 · Name.com, Inc.
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. facebook91-inf-ord-id3129424.cfd US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    facebook91-inf-ord-id3129424.cfd
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .cfd zone file, already registered
    Registered
    2026-04-10 · Gname.com Pte. Ltd.
    Addresses
    104.21.74.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.196.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:4a21
    2606:4700:3036::ac43:c445
    Cloudflare
    Cloudflare (104.21.74.33, 172.67.196.69): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. fae-book.liveLookalike of facebook.com · a dropped letter
    No address or mail server yet
    DetailsHide
    Domain
    fae-book.live
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-04-10 · NameCheap, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. facebooks.blog US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · an added character
    Amazon Web Services
    DetailsHide
    Domain
    facebooks.blog
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .blog zone file, already registered
    Registered
    2026-04-09 · Name.com, Inc
    Addresses
    75.2.29.147 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    166.117.246.71 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (75.2.29.147, 166.117.246.71): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. f-a-c-e-b-o-o-k.info US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · an added hyphen
    Amazon Web Services
    DetailsHide
    Domain
    f-a-c-e-b-o-o-k.info
    Spelling
    Spelled like facebook.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-04-08 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. f-a-c-e-b-o-o-k.pro US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · an added hyphen
    Registry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    f-a-c-e-b-o-o-k.pro
    Spelling
    Spelled like facebook.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-04-08 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. faceblook.bidLookalike of facebook.com · an added character
    MX present
    DetailsHide
    Domain
    faceblook.bid
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .bid zone file, already registered
    Registered
    2026-04-08 · Cloudflare, Inc.
    MX
    route3.mx.cloudflare.net
    route1.mx.cloudflare.net
    route2.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. messenger.news US · AS16509 · Amazon.com, Inc.2 addressesLookalike of messenger.com · the ending .news
    Parking page · Afternic
    DetailsHide
    Domain
    messenger.news
    Spelling
    The name of messenger.com with the ending .news
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-03 · Sav.com, LLC - 26
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates messenger.news to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. messenger.world US · AS16509 · Amazon.com, Inc.2 addressesLookalike of messenger.com · the ending .world
    Parking page · Afternic
    DetailsHide
    Domain
    messenger.world
    Spelling
    The name of messenger.com with the ending .world
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-02 · Sav.com, LLC - 40
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates messenger.world to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. messenger.work US · AS16509 · Amazon.com, Inc.2 addressesLookalike of messenger.com · the ending .work
    Parking page · Afternic
    DetailsHide
    Domain
    messenger.work
    Spelling
    The name of messenger.com with the ending .work
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-03-22 · Sav.com, LLC - 13
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates messenger.work to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. faccebook.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · a doubled letter
    Hostinger
    DetailsHide
    Domain
    faccebook.site
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-03-15 · HOSTINGER operations, UAB
    Addresses
    69.62.71.166 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (69.62.71.166): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. focebook.blog CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addressesLookalike of facebook.com · a changed character
    HostingerMX present
    DetailsHide
    Domain
    focebook.blog
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .blog zone file, already registered
    Registered
    2026-03-10 · HOSTINGER operations, UAB
    Addresses
    89.116.147.224 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    2a02:4780:27:1066:0:36c6:68f8:2
    Hostinger
    Hostinger (89.116.147.224): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. fac-ebook.comLookalike of facebook.com · an added hyphen
    No address or mail server yet
    DetailsHide
    Domain
    fac-ebook.com
    Spelling
    Spelled like facebook.com with an added hyphen
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-03-09 · Key-Systems GmbH
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. facebbok.topLookalike of facebook.com · a changed character
    No address or mail server yet
    DetailsHide
    Domain
    facebbok.top
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-03-05 · 成都西维数码科技有限公司
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. faceb00k-com.site US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · similar-looking characters
    CloudflareMX present
    DetailsHide
    Domain
    faceb00k-com.site
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-03-05 · HOSTINGER operations, UAB
    Addresses
    104.21.60.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:3c45
    2606:4700:3035::ac43:c162
    Cloudflare
    Cloudflare (104.21.60.69, 172.67.193.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx.faceb00k-com.site
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. messenger.bz LT · AS59642 · CHERRYSERVERS2-AS UAB "Cher…Lookalike of messenger.com · the ending .bz
    DetailsHide
    Domain
    messenger.bz
    Spelling
    The name of messenger.com with the ending .bz
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-02-23 · Immaterialism Limited
    Addresses
    84.32.190.92 · Lithuania · AS59642 CHERRYSERVERS2-AS UAB "Cherry Servers"
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. face8ook.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · similar-looking characters
    Cloudflare
    DetailsHide
    Domain
    face8ook.org
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-02-16 · DropCatch.com 1119 LLC
    Addresses
    104.21.8.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8b86
    2606:4700:3037::6815:88d
    Cloudflare
    Cloudflare (104.21.8.141, 172.67.139.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC

Registered domains using the name

Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Facebook's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

100 of 634 shown: listed ones first, then the newest registrations.

  1. facebook101giris.click US · AS197769 · VPSDEDICATED-AS VPS Dedicat…Contains “facebook”
    Address on Spamhaus DROP
    DetailsHide
    Domain
    facebook101giris.click
    Match
    A registered domain containing “facebook”, one of the names we match for Facebook
    Zone file copy
    2026-10-31 · the day of the .click zone file copy it was found in
    Registered
    2026-08-10 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    130.12.181.27 is on Spamhaus DROP · facebook101giris.click resolved to it 2026-11-04 23:50 UTC
    Addresses
    130.12.181.27 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. facebooka101giris.help US · AS197769 · VPSDEDICATED-AS VPS Dedicat…Contains “facebook”
    Address on Spamhaus DROP
    DetailsHide
    Domain
    facebooka101giris.help
    Match
    A registered domain containing “facebook”, one of the names we match for Facebook
    Zone file copy
    2026-10-31 · the day of the .help zone file copy it was found in
    Registered
    2026-08-10 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    130.12.181.27 is on Spamhaus DROP · facebooka101giris.help resolved to it 2026-11-04 23:50 UTC
    Addresses
    130.12.181.27 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. rekemonedasi-facebook.org US · AS13335 · Cloudflare, Inc.4 addressesContains “facebook”
    Reported by PhishDestroyCloudflare
    DetailsHide
    Domain
    rekemonedasi-facebook.org
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-08-09 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · rekemonedasi-facebook.org · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.74.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4a70
    2606:4700:3036::ac43:9ded
    Cloudflare
    Cloudflare (104.21.74.112, 172.67.157.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. meta-verified.live DE · AS47846 · SEDO-AS SEDO GmbHContains “meta-verified”
    Listed by CERT PolskaParking page · Sedo
    DetailsHide
    Domain
    meta-verified.live
    Match
    A domain containing “meta-verified”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-07-21 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by CERT Polska
    Listed by CERT Polska · meta-verified.live · Listed by CERT Polska 2026-07-21 09:44 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. metaforbusiness.live DE · AS47846 · SEDO-AS SEDO GmbHContains “metaforbusiness”
    Listed by CERT PolskaParking page · Sedo
    DetailsHide
    Domain
    metaforbusiness.live
    Match
    A domain containing “metaforbusiness”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-07-18 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by CERT Polska
    Listed by CERT Polska · metaforbusiness.live · Listed by CERT Polska 2026-07-20 16:56 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. meta-for-business.help DE · AS47846 · SEDO-AS SEDO GmbHContains “meta-for-business”
    Listed by CERT PolskaParking page · Sedo
    DetailsHide
    Domain
    meta-for-business.help
    Match
    A domain containing “meta-for-business”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .help zone file, already registered
    Registered
    2026-07-17 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by CERT Polska
    Listed by CERT Polska · meta-for-business.help · Listed by CERT Polska 2026-07-17 20:49 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. messenger-ads.online RU · AS197695 · AS-REGRU "Domain names regi…Contains “messenger”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    messenger-ads.online
    Match
    A registered domain containing “messenger”, one of the names we match for Facebook
    Zone file copy
    2026-10-31 · the day of the .online zone file copy it was found in
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    95.163.244.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · messenger-ads.online resolved to it 2026-11-04 23:50 UTC
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. facebookadidas.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebookadidas.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-03 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebookadidas.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. facebooklululemon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebooklululemon.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-03 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebooklululemon.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. facebookdisney.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebookdisney.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-01 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebookdisney.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. facebooktencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebooktencent.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-01 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebooktencent.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. adobe-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    adobe-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · adobe-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. chanel-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    chanel-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · chanel-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. citi-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    citi-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · citi-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. facebook-alibaba.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-alibaba.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-alibaba.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. facebook-cisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-cisco.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-cisco.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. facebook-kellanova.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-kellanova.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-kellanova.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. facebook-kfc.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-kfc.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-kfc.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. facebook-kia.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-kia.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-kia.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. facebook-paypal.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-paypal.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-paypal.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. facebook-pfizer.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-pfizer.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-pfizer.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. facebook-shell.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-shell.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-shell.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. facebook-sony.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-sony.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-sony.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. facebook-walmart.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-walmart.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-walmart.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. gucci-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    gucci-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gucci-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. honda-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    honda-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · honda-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. hyundai-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    hyundai-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyundai-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. kfc-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    kfc-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kfc-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. nestle-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    nestle-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nestle-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. netflix-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    netflix-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · netflix-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. nvidia-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    nvidia-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nvidia-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. pfizer-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    pfizer-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · pfizer-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. prada-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    prada-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. rolex-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    rolex-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · rolex-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. unilever-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    unilever-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · unilever-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. uniqlo-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    uniqlo-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · uniqlo-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. youtube-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    youtube-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · youtube-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. facebook-apple.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-apple.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-apple.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. facebook-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-nintendo.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-nintendo.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. gillette-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    gillette-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. hsbc-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    hsbc-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. caterpillar-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    caterpillar-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · caterpillar-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. shopify-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    shopify-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-26 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shopify-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. facebookonline.cloud IT · AS31034 · ARUBA-ASN Aruba S.p.A.Contains “facebook”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    facebookonline.cloud
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-04-17 · Tucows Domains Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    62.149.128.40 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebookonline.cloud resolved to it 2026-11-04 23:50 UTC
    Addresses
    62.149.128.40 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    MX
    mx.facebookonline.cloud
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. service-messenger.xyz JP · AS7506 · GMO Internet, Inc.Contains “messenger”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    service-messenger.xyz
    Match
    A registered domain containing “messenger”, one of the names we match for Facebook
    Zone file copy
    2026-10-31 · the day of the .xyz zone file copy it was found in
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · service-messenger.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. variable-facebook-containerd.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    variable-facebook-containerd.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-facebook-containerd.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. variable-smalltalk-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    variable-smalltalk-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-smalltalk-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. vcenter-skopeo-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    vcenter-skopeo-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vcenter-skopeo-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. vector-duty-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    vector-duty-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vector-duty-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. vector-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    vector-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vector-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. verilog-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    verilog-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. voter-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    voter-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · voter-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. voter-objective-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    voter-objective-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · voter-objective-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. wasm-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wasm-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. watch-facebook-happiness.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    watch-facebook-happiness.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · watch-facebook-happiness.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. weakness-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    weakness-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · weakness-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. websphere-shop-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    websphere-shop-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · websphere-shop-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. wet-streamlit-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wet-streamlit-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wet-streamlit-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. whatsapp-pytorch-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-pytorch-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-pytorch-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. who-facebook-kaggle.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    who-facebook-kaggle.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · who-facebook-kaggle.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. whose-glassfish-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whose-glassfish-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whose-glassfish-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. why-kube-router-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    why-kube-router-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · why-kube-router-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. why-spice-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    why-spice-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · why-spice-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. why-wrong-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    why-wrong-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · why-wrong-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. world-before-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    world-before-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · world-before-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. xen-cordova-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    xen-cordova-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · xen-cordova-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. zabbix-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    zabbix-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · zabbix-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. zabbix-opengl-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    zabbix-opengl-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · zabbix-opengl-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. zeplin-height-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    zeplin-height-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · zeplin-height-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. microsoft-facebook-digital.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    microsoft-facebook-digital.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-facebook-digital.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. instance-facebook-bokeh.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    instance-facebook-bokeh.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-facebook-bokeh.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. integer-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    integer-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · integer-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. integration-facebook-clojure.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    integration-facebook-clojure.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · integration-facebook-clojure.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. integration-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    integration-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · integration-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. integration-opengl-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    integration-opengl-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · integration-opengl-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. interface-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    interface-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · interface-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. internet-facebook-bravery.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    internet-facebook-bravery.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · internet-facebook-bravery.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. ionic-flavor-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    ionic-flavor-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ionic-flavor-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. istio-metrics-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    istio-metrics-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · istio-metrics-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. javascript-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    javascript-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · javascript-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. javascript-slack-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    javascript-slack-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · javascript-slack-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. jboss-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jboss-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jboss-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. jetty-podman-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jetty-podman-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-podman-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. jira-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jira-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jira-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. jira-volume-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jira-volume-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jira-volume-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. jitter-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jitter-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jitter-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. joy-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    joy-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · joy-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. jquery-planet-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jquery-planet-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jquery-planet-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. julia-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    julia-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · julia-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. jupyter-global-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jupyter-global-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jupyter-global-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. kata-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    kata-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kata-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. kibana-store-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    kibana-store-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kibana-store-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. kubernetes-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    kubernetes-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kubernetes-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. labview-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    labview-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · labview-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. laptop-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    laptop-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · laptop-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. latency-facebook-health.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    latency-facebook-health.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · latency-facebook-health.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. lattice-facebook-glass.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    lattice-facebook-glass.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · lattice-facebook-glass.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. layer-protobuf-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    layer-protobuf-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · layer-protobuf-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. leader-ember-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    leader-ember-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · leader-ember-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. ledger-which-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    ledger-which-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-which-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Social media

All brands →