Facebook

Social media United Statesfacebook.comRank 5 of the most impersonated
Cert findings · 24 h
7
Cert findings · 7 days
23
9 reported or listed · 14 on phishing hosts
Registered lookalikes
519
64 listed by a source or an address list
Official domains
40
verified from Facebook's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of Facebook's official domains (facebook.com, messenger.com, facebookmail.com) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

64 of the 519 are listed by a source or resolve to a listed address, checked hourly.

  1. facbook.cloud CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    facbook.cloud
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-06-12 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facbook.cloud resolved to it 2026-11-04 23:50 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. faceook.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    faceook.pl
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-17 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. messenger.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesLookalike of messenger.com · the ending .tips
    5 addresses on DomainSpoof’s phishing-host listHetzner +1
    DetailsHide
    Domain
    messenger.tips
    Spelling
    The name of messenger.com with the ending .tips
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-22 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    5 addresses on DomainSpoof’s phishing-host list
    195.201.128.179 (messenger.tips resolved to it 2026-11-01 18:14 UTC), 46.62.237.138 (messenger.tips resolved to it 2026-11-01 18:14 UTC), 5.161.230.87 (messenger.tips resolved to it 2026-11-01 18:14 UTC), 5.161.47.86 (messenger.tips resolved to it 2026-11-01 18:14 UTC), 5.78.156.59 (messenger.tips resolved to it 2026-11-01 18:14 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2406:da1e:214:c901:49:871:e9e1:eb92
    2600:1f1c:6db:8800:3874:4c01:cb9:391f
    2600:1f1c:6db:8800:79cb:1ef5:7739:e6be
    2600:1f1c:6db:8801:5056:7a82:ae7e:8cec
    2600:1f1c:6db:8801:7620:4565:8dce:8b5a
    2600:1f1c:6db:8801:9173:d91:a3b8:2148
    2600:1f1c:6db:8801:b190:5302:8b46:f792
    2a05:d014:179b:c400:2b16:26d0:c04c:4fef
    Hetzner +1
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. faccebook.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a doubled letter
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    faccebook.pl
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-02 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faccebook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. fecebook.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · a changed character
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    fecebook.online
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-02-12 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · fecebook.online resolved to it 2026-11-04 23:50 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. fcebook.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide
    Domain
    fcebook.shop
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-02-07 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · fcebook.shop resolved to it 2026-11-04 15:33 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. faceboox.top MD · AS200019 · AlexHost ALEXHOST S.R.L.Lookalike of facebook.com · a changed character
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    faceboox.top
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-01-30 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    37.221.67.157 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceboox.top resolved to it 2026-11-04 23:50 UTC
    Addresses
    37.221.67.157 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    MX
    mail.faceboox.top
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. gacebook.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    gacebook.pl
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-01-20 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gacebook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. facbook.online VN · AS45903 · CMC Telecom Infrastructure …Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facbook.online
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-01-19 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    203.171.27.189 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facbook.online resolved to it 2026-11-04 15:33 UTC
    Addresses
    203.171.27.189 · Vietnam · AS45903 CMCTELECOM-VN - CMC Telecom Infrastructure Company
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. faceb00k.top CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · similar-looking characters
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    faceb00k.top
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-01-12 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceb00k.top resolved to it 2026-11-04 15:33 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. kaggle-facebook-payment.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    kaggle-facebook-payment.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kaggle-facebook-payment.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. market-facebook-invoice.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    market-facebook-invoice.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · market-facebook-invoice.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. mars-account-facebook.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “mars-account”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    mars-account-facebook.xyz
    Spelling
    The name of facebook.com with the word “mars-account”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · mars-account-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. messenger-index-claim.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    messenger-index-claim.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · messenger-index-claim.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. messenger-verify-subscription.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    messenger-verify-subscription.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · messenger-verify-subscription.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. facebook-account-internet.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “account-internet”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook-account-internet.xyz
    Spelling
    The name of facebook.com with the word “account-internet”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-account-internet.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. facebook-account.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “account”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook-account.xyz
    Spelling
    The name of facebook.com with the word “account”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-account.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. facebook-binding-security.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “binding-security”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook-binding-security.xyz
    Spelling
    The name of facebook.com with the word “binding-security”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-binding-security.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. facebook-claim.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “claim”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook-claim.xyz
    Spelling
    The name of facebook.com with the word “claim”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-claim.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. facebook-payment-vivado.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “payment-vivado”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook-payment-vivado.xyz
    Spelling
    The name of facebook.com with the word “payment-vivado”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-payment-vivado.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. facebook-rights-claim.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “rights-claim”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook-rights-claim.xyz
    Spelling
    The name of facebook.com with the word “rights-claim”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-rights-claim.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. facebook-security.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “security”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook-security.xyz
    Spelling
    The name of facebook.com with the word “security”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-security.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. facebook-volume-payment.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with the word “volume-payment”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook-volume-payment.xyz
    Spelling
    The name of facebook.com with the word “volume-payment”
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-volume-payment.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. hospital-facebook-invoice.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    hospital-facebook-invoice.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hospital-facebook-invoice.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. image-messenger-claim.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    image-messenger-claim.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-08 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · image-messenger-claim.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. billing-router-messenger.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    billing-router-messenger.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-07 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · billing-router-messenger.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. channel-claim-messenger.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    channel-claim-messenger.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-07 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · channel-claim-messenger.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. claim-messenger-symbol.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    claim-messenger-symbol.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-07 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · claim-messenger-symbol.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. css-claim-messenger.xyz JP · AS7506 · GMO Internet, Inc.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    css-claim-messenger.xyz
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-07 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · css-claim-messenger.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. facebooo.com.br CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide
    Domain
    facebooo.com.br
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2025-11-13
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebooo.com.br resolved to it 2026-11-04 15:33 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. faceboik.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    faceboik.pl
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2025-11-11 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceboik.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. faceboo.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    faceboo.pl
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2024-12-15 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceboo.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. faceobok.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · two letters swapped
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    faceobok.pl
    Spelling
    Spelled like facebook.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2024-05-21 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceobok.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. fwcebook.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    fwcebook.pl
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2024-03-04 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · fwcebook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. facebok.click CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    facebok.click
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-12-21 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebok.click resolved to it 2026-11-04 15:33 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. facebok.cloud US · AS25773 · RADWARE INC.Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebok.cloud
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2022-02-15 · eNom, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    66.22.16.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebok.cloud resolved to it 2026-11-04 23:50 UTC
    Addresses
    66.22.16.138 · United States · AS25773 RADWARE-CLOUD-SERVICES - RADWARE INC.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. facobook.site NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of facebook.com · a changed character
    Address on DomainSpoof’s phishing-host listNamecheap
    DetailsHide
    Domain
    facobook.site
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2020-10-22 · NameCheap, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facobook.site resolved to it 2026-11-04 23:50 UTC
    Addresses
    2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.
    104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
    Namecheap
    Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. facebiok.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    facebiok.pl
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2020-01-02 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebiok.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. messenger.bayern DE · AS202108 · UDAG united-domains GmbHLookalike of messenger.com · the ending .bayern
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    messenger.bayern
    Spelling
    The name of messenger.com with the ending .bayern
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2019-03-06 · united-domains AG
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    89.31.143.90 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · messenger.bayern resolved to it 2026-11-01 18:14 UTC
    Addresses
    89.31.143.90 · Germany · AS202108 UDAG united-domains GmbH
    MX
    mx00.udag.de
    mx01.udag.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. messenger.uk GB · AS8622 · ISIONUK TEAM BLUE INTERNET …Lookalike of messenger.com · the ending .uk
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    messenger.uk
    Spelling
    The name of messenger.com with the ending .uk
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2018-12-10 · Team Blue Internet Services UK Limited t/a Team Blue Internet Services Limited t/a LCN
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    85.233.160.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · messenger.uk resolved to it 2026-11-01 18:14 UTC
    Addresses
    85.233.160.22 · United Kingdom · AS8622 ISIONUK TEAM BLUE INTERNET SERVICES UK LIMITED
    MX
    mailforward.lcn.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. facebok.com.br BR · AS22548 · Nucleo de Inf. e Coord. do …2 addressesLookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebok.com.br
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2018-06-21
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    200.160.2.95 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebok.com.br resolved to it 2026-11-04 15:33 UTC
    Addresses
    200.160.2.95 · Brazil · AS22548 AS22548 - Nucleo de Inf. e Coord. do Ponto BR - NIC.BR
    2001:12ff:0:2::95
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. facbook.app DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide
    Domain
    facbook.app
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2018-05-09 · 1&1 Internet SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.226 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facbook.app resolved to it 2026-11-04 15:33 UTC
    Addresses
    217.160.0.226 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::281
    IONOS
    IONOS (217.160.0.226): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. messenger.ai FR · AS16276 · OVH OVH SASLookalike of messenger.com · the ending .ai
    Address on DomainSpoof’s phishing-host listOVHMX present
    DetailsHide
    Domain
    messenger.ai
    Spelling
    The name of messenger.com with the ending .ai
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2017-12-16 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    198.50.252.64 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · messenger.ai resolved to it 2026-11-01 18:14 UTC
    Addresses
    198.50.252.64 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (198.50.252.64): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.messenger.ai
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. f4ceb00k.art FR · AS16276 · OVH OVH SASLookalike of facebook.com · similar-looking characters
    Address on DomainSpoof’s phishing-host listOVHMX present
    DetailsHide
    Domain
    f4ceb00k.art
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .art zone file, already registered
    Registered
    2017-05-10 · OVH sas
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    87.98.154.146 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · f4ceb00k.art resolved to it 2026-11-04 23:50 UTC
    Addresses
    87.98.154.146 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (87.98.154.146): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx4.mail.ovh.net
    mx3.mail.ovh.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. facdbook.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    facdbook.pl
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-04-18 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facdbook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. facebookcard.org IT · AS31034 · ARUBA-ASN Aruba S.p.A.Lookalike of facebook.com · the name with an added word
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    facebookcard.org
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2012-01-07 · Tucows Domains Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    62.149.189.55 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebookcard.org resolved to it 2026-11-04 23:50 UTC
    Addresses
    62.149.189.55 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    MX
    mx.facebookcard.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. faceboook.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a doubled letter
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    faceboook.pl
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2010-03-30 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceboook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. fcebook.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    fcebook.pl
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2010-02-03 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · fcebook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. facebbook.pl DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of facebook.com · a doubled letter
    Address on DomainSpoof’s phishing-host listHetznerMX present
    DetailsHide
    Domain
    facebbook.pl
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2009-09-04 · RegistryGate GmbH
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    91.98.101.145 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebbook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx.domainparking.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. fscebook.pl DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listHetznerMX present
    DetailsHide
    Domain
    fscebook.pl
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2009-09-02 · RegistryGate GmbH
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    91.98.101.145 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · fscebook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx.domainparking.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. facbook.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    facbook.pl
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2009-03-15 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facbook.pl resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. faceb00k.com US · AS46475 · Limestone Networks, Inc.Lookalike of facebook.com · similar-looking characters
    Address on DomainSpoof’s phishing-host listRegistry lookup queued
    DetailsHide
    Domain
    faceb00k.com
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2005-09-13 · Media Elite Holdings Limited, S.A.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    69.162.80.52 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceb00k.com resolved to it 2026-11-04 15:33 UTC
    Addresses
    69.162.80.52 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. fafebook.com DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listHetznerMX present
    DetailsHide
    Domain
    fafebook.com
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2005-06-23 · RegistryGate GmbH
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    91.98.101.145 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · fafebook.com resolved to it 2026-11-04 15:33 UTC
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx.domainparking.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. messenger.net.cn CN · AS55967 · Beijing Baidu Netcom Scienc…Lookalike of messenger.com · the ending .net.cn
    Address on Spamhaus DROP
    DetailsHide
    Domain
    messenger.net.cn
    Spelling
    The name of messenger.com with the ending .net.cn
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    154.85.50.173 is on Spamhaus DROP · messenger.net.cn resolved to it 2026-11-01 18:14 UTC
    Addresses
    154.85.50.173 · China · AS55967 Baidu - Beijing Baidu Netcom Science and Technology Co., Ltd.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. messenger.net.nz NZ · AS56030 · Voyager Internet Ltd.Lookalike of messenger.com · the ending .net.nz
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    messenger.net.nz
    Spelling
    The name of messenger.com with the ending .net.nz
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    210.55.30.93 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · messenger.net.nz resolved to it 2026-11-01 18:14 UTC
    Addresses
    210.55.30.93 · New Zealand · AS56030 VOYAGERNET-AS-AP - Voyager Internet Ltd.
    MX
    mta.1stdomains.net.nz
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. messenger.org.cn CN · AS55967 · Beijing Baidu Netcom Scienc…Lookalike of messenger.com · the ending .org.cn
    Address on Spamhaus DROP
    DetailsHide
    Domain
    messenger.org.cn
    Spelling
    The name of messenger.com with the ending .org.cn
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    154.85.50.173 is on Spamhaus DROP · messenger.org.cn resolved to it 2026-11-01 18:14 UTC
    Addresses
    154.85.50.173 · China · AS55967 Baidu - Beijing Baidu Netcom Science and Technology Co., Ltd.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. facebook.lt LT · AS212531 · Interneto-vizija UAB "Inter…Lookalike of facebook.com · the ending .lt
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    facebook.lt
    Spelling
    The name of facebook.com with the ending .lt
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    79.98.25.1 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook.lt resolved to it 2026-11-01 10:21 UTC
    Addresses
    79.98.25.1 · Lithuania · AS212531 Interneto-vizija UAB "Interneto vizija"
    MX
    mx-parked.serveriai.lt
    mx-backup.serveriai.lt
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. facebook.su RU · AS197695 · AS-REGRU "Domain names regi…Lookalike of facebook.com · the ending .su
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebook.su
    Spelling
    The name of facebook.com with the ending .su
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    95.163.244.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook.su resolved to it 2026-11-01 10:21 UTC
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. facebiok.de DE · AS6724 · STRATO Strato GmbH2 addressesLookalike of facebook.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    facebiok.de
    Spelling
    Spelled like facebook.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    81.169.145.161 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebiok.de resolved to it 2026-11-04 15:33 UTC
    Addresses
    81.169.145.161 · Germany · AS6724 STRATO Strato GmbH
    2a01:238:20a:202:1161::
    MX
    smtpin.rzone.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. facebok.dk NO · AS12996 · DOMENESHOP Domeneshop AS2 addressesLookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebok.dk
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    194.63.248.52 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebok.dk resolved to it 2026-11-04 15:33 UTC
    Addresses
    194.63.248.52 · Norway · AS12996 DOMENESHOP Domeneshop AS
    2a01:5b40:0:248::52
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. facebok.it DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebok.it
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    195.201.69.223 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebok.it resolved to it 2026-11-04 15:33 UTC
    Addresses
    195.201.69.223 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (195.201.69.223): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. facebok.se NO · AS12996 · DOMENESHOP Domeneshop AS2 addressesLookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    facebok.se
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    194.63.248.52 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebok.se resolved to it 2026-11-04 15:33 UTC
    Addresses
    194.63.248.52 · Norway · AS12996 DOMENESHOP Domeneshop AS
    2a01:5b40:0:248::52
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. faceboko.de DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of facebook.com · two letters swapped
    Address on DomainSpoof’s phishing-host listHetznerMX present
    DetailsHide
    Domain
    faceboko.de
    Spelling
    Spelled like facebook.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    91.98.101.145 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceboko.de resolved to it 2026-11-04 15:33 UTC
    Addresses
    91.98.101.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (91.98.101.145): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx.domainparking.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. faceboo.it PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of facebook.com · a dropped letter
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    faceboo.it
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · faceboo.it resolved to it 2026-11-04 15:33 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. meta-facebook-security.site US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the name with an added word
    PhishDestroy CommunitySuspicious · highCloudflare
    DetailsHide
    Domain
    meta-facebook-security.site
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-03 · the day the .site zone file first listed it as a new registration
    Registered
    2026-11-02 · Cloudflare, Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-04, the day DomainSpoof first read it there. About the list
    Addresses
    104.21.76.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:4ce4
    2606:4700:3033::ac43:c9ed
    Cloudflare
    Cloudflare (104.21.76.228, 172.67.201.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. faceebook.social US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · a doubled letter
    Amazon Web Services
    DetailsHide
    Domain
    faceebook.social
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .social zone file, already registered
    Registered
    2026-10-25 · Tucows Domains Inc.
    Addresses
    13.248.148.104 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.20.46 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.148.104, 76.223.20.46): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. faceboookmail.cfd US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebookmail.com · a doubled letter
    CloudflareMX present
    DetailsHide
    Domain
    faceboookmail.cfd
    Spelling
    Spelled like facebookmail.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-25 · NameSilo, LLC
    Addresses
    104.21.92.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.160 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:5c42
    2606:4700:3037::ac43:bba0
    Cloudflare
    Cloudflare (104.21.92.66, 172.67.187.160): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    route2.mx.cloudflare.net
    route1.mx.cloudflare.net
    route3.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. facibook.blog CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of facebook.com · a changed character
    Hostinger
    DetailsHide
    Domain
    facibook.blog
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .blog zone file, already registered
    Registered
    2026-10-24 · Go Daddy, LLC
    Addresses
    187.127.12.222 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (187.127.12.222): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. facebooksupport.techLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    facebooksupport.tech
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-10-23 · eNom, LLC
    MX
    mx.b.locaweb.com.br
    mx.core.locaweb.com.br
    mx.a.locaweb.com.br
    mx.jk.locaweb.com.br
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. verifyfacebook.siteLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    verifyfacebook.site
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-10-19 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. messenger.watch US · AS22612 · Namecheap, Inc.Lookalike of messenger.com · the ending .watch
    Parking page · Namecheap parkingMX present
    DetailsHide
    Domain
    messenger.watch
    Spelling
    The name of messenger.com with the ending .watch
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-19 · NameCheap, Inc.
    Addresses
    192.64.119.199 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
    Parking page · Namecheap parking
    Namecheap parking (192.64.119.199): a parking service. It answers for names that are typically for sale or unused.
    MX
    eforward1.registrar-servers.com
    eforward2.registrar-servers.com
    eforward3.registrar-servers.com
    eforward4.registrar-servers.com
    eforward5.registrar-servers.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. facbook.bond US · AS14061 · DigitalOcean, LLC2 addressesLookalike of facebook.com · a dropped letter
    DigitalOcean
    DetailsHide
    Domain
    facbook.bond
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .bond zone file, already registered
    Registered
    2026-10-18 · NicNames, Inc.
    Addresses
    159.203.143.218 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    2604:a880:800:14:0:1:225d:c000
    DigitalOcean
    DigitalOcean (159.203.143.218): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. facebookverify.siteLookalike of facebook.com · the name with an added word
    No address or mail server yet
    DetailsHide
    Domain
    facebookverify.site
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-10-18 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. faceboek.rest DE · AS51167 · CONTABO Contabo GmbHLookalike of facebook.com · a changed character
    Registry lookup queuedContabo
    DetailsHide
    Domain
    faceboek.rest
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .rest zone file, already registered
    Registered
    2026-10-14 · GoDaddy
    Addresses
    169.58.167.45 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (169.58.167.45): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. facebook.build US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · the ending .build
    Cloudflare
    DetailsHide
    Domain
    facebook.build
    Spelling
    The name of facebook.com with the ending .build
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-12 · Cloudflare, Inc.
    Addresses
    104.21.40.179 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.202 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:28b3
    2606:4700:3037::ac43:88ca
    Cloudflare
    Cloudflare (104.21.40.179, 172.67.136.202): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. facbook.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · a dropped letter
    Cloudflare
    DetailsHide
    Domain
    facbook.net
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-12 · Spaceship, Inc.
    Addresses
    104.21.49.214 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:c190
    2606:4700:3035::6815:31d6
    Cloudflare
    Cloudflare (104.21.49.214, 172.67.193.144): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. faceebook.co IS · AS200651 · FlokiNET FlokiNET ehfLookalike of facebook.com · a doubled letter
    MX present
    DetailsHide
    Domain
    faceebook.co
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-12 · TLD Registrar Solutions Ltd.
    Addresses
    185.247.226.180 · Iceland · AS200651 FlokiNET FlokiNET ehf
    MX
    mail.faceebook.co
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. metaverifiedhelp.online SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of facebook.com · the name with an added word
    Parking page · Shared parking page
    DetailsHide
    Domain
    metaverifiedhelp.online
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-10-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. supportfacebook.restLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    supportfacebook.rest
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .rest zone file, already registered
    Registered
    2026-10-10 · Dynadot, LLC
    MX
    mail.supportfacebook.rest
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. facabook.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · a changed character
    Cloudflare
    DetailsHide
    Domain
    facabook.org
    Spelling
    Spelled like facebook.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-10-07 · Cloudflare, Inc.
    Addresses
    104.21.95.69 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.125 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:5f45
    2606:4700:3034::ac43:8f7d
    Cloudflare
    Cloudflare (104.21.95.69, 172.67.143.125): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. facebooks.world US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · an added character
    Cloudflare
    DetailsHide
    Domain
    facebooks.world
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .world zone file, already registered
    Registered
    2026-10-07 · Dynadot Inc
    Addresses
    104.21.70.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:464d
    2606:4700:3037::ac43:dda3
    Cloudflare
    Cloudflare (104.21.70.77, 172.67.221.163): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. facecbook.top US · AS13335 · Cloudflare, Inc.4 addressesLookalike of facebook.com · an added character
    Cloudflare
    DetailsHide
    Domain
    facecbook.top
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-01 · Porkbun LLC
    Addresses
    104.21.37.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.209.185 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:2595
    2606:4700:3033::ac43:d1b9
    Cloudflare
    Cloudflare (104.21.37.149, 172.67.209.185): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. messenger.cx US · AS16509 · Amazon.com, Inc.Lookalike of messenger.com · the ending .cx
    Parking page · Dynadot parking
    DetailsHide
    Domain
    messenger.cx
    Spelling
    The name of messenger.com with the ending .cx
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-01 · CentralNic Ltd
    Addresses
    54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
    Parking page · Dynadot parking
    Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. facebooksecurity.bidLookalike of facebook.com · the name with an added word
    No address or mail server yet
    DetailsHide
    Domain
    facebooksecurity.bid
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .bid zone file, already registered
    Registered
    2026-09-30 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. securityfacebook.bidLookalike of facebook.com · the name with an added word
    No address or mail server yet
    DetailsHide
    Domain
    securityfacebook.bid
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .bid zone file, already registered
    Registered
    2026-09-30 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. securityfacebookmail.bidLookalike of facebook.com · the name with an added word
    No address or mail server yet
    DetailsHide
    Domain
    securityfacebookmail.bid
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .bid zone file, already registered
    Registered
    2026-09-30 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. verifyfacebook.winLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    verifyfacebook.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-30 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. facebookmail.winLookalike of facebookmail.com · the ending .win
    MX present
    DetailsHide
    Domain
    facebookmail.win
    Spelling
    The name of facebookmail.com with the ending .win
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-09-30 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. faecbook.onlineLookalike of facebook.com · two letters swapped
    DetailsHide
    Domain
    faecbook.online
    Spelling
    Spelled like facebook.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-29 · HOSTINGER operations, UAB
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. facebooky.org US · AS396982 · Google LLCLookalike of facebook.com · an added character
    Google Cloud
    DetailsHide
    Domain
    facebooky.org
    Spelling
    Spelled like facebook.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-09-28 · Name.com, Inc.
    Addresses
    34.111.179.208 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
    Google Cloud
    Google Cloud (34.111.179.208): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. faceb00k.pro US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · similar-looking characters
    Amazon Web Services
    DetailsHide
    Domain
    faceb00k.pro
    Spelling
    Spelled like facebook.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-09-27 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Addresses
    13.248.148.104 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.20.46 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.148.104, 76.223.20.46): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. messenger.center US · AS16509 · Amazon.com, Inc.2 addressesLookalike of messenger.com · the ending .center
    Parking page · Afternic
    DetailsHide
    Domain
    messenger.center
    Spelling
    The name of messenger.com with the ending .center
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-26 · Porkbun LLC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates messenger.center to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. supportfacebook.clickLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    supportfacebook.click
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-09-25 · Dynadot, LLC
    MX
    mail.supportfacebook.click
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. supportfacebook.sbsLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    supportfacebook.sbs
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-09-25 · Dynadot Inc
    MX
    mail.supportfacebook.sbs
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. messenger.run US · AS14618 · Amazon.com, Inc.Lookalike of messenger.com · the ending .run
    Parking page · Atom
    DetailsHide
    Domain
    messenger.run
    Spelling
    The name of messenger.com with the ending .run
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-25 · Sav.com, LLC - 7
    Addresses
    52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
    Parking page · Atom
    The registry delegates messenger.run to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. xn--facebok-e1a.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · international characters, shown as faceböok.com
    Registry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    xn--facebok-e1a.com
    Spelling
    Spelled like facebook.com with international characters, shown as faceböok.com
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-22 · 123-Reg Limited
    Addresses
    13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. xn--facebok-f1a.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of facebook.com · international characters, shown as faceboök.com
    Registry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    xn--facebok-f1a.com
    Spelling
    Spelled like facebook.com with international characters, shown as faceboök.com
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-22 · 123-Reg Limited
    Addresses
    13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. faceebook.monster 243.101.223.191Lookalike of facebook.com · a doubled letter
    DetailsHide
    Domain
    faceebook.monster
    Spelling
    Spelled like facebook.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .monster zone file, already registered
    Registered
    2026-09-21 · NameSilo, LLC
    Addresses
    243.101.223.191
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. metaverified-help.winLookalike of facebook.com · the name with an added word
    MX present
    DetailsHide
    Domain
    metaverified-help.win
    Spelling
    The name of facebook.com with an added word
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2026-09-21 · Cloudflare, Inc.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. facebok.in US · AS16509 · Amazon.com, Inc.Lookalike of facebook.com · a dropped letter
    Amazon Web Services
    DetailsHide
    Domain
    facebok.in
    Spelling
    Spelled like facebook.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-20 · GoDaddy
    Addresses
    13.49.227.242 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.49.227.242): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC

Registered domains using the name

Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Facebook's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

100 of 634 shown: listed ones first, then the newest registrations.

  1. facebook101giris.click US · AS197769 · VPSDEDICATED-AS VPS Dedicat…Contains “facebook”
    Address on Spamhaus DROP
    DetailsHide
    Domain
    facebook101giris.click
    Match
    A registered domain containing “facebook”, one of the names we match for Facebook
    Zone file copy
    2026-10-31 · the day of the .click zone file copy it was found in
    Registered
    2026-08-10 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    130.12.181.27 is on Spamhaus DROP · facebook101giris.click resolved to it 2026-11-04 23:50 UTC
    Addresses
    130.12.181.27 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. facebooka101giris.help US · AS197769 · VPSDEDICATED-AS VPS Dedicat…Contains “facebook”
    Address on Spamhaus DROP
    DetailsHide
    Domain
    facebooka101giris.help
    Match
    A registered domain containing “facebook”, one of the names we match for Facebook
    Zone file copy
    2026-10-31 · the day of the .help zone file copy it was found in
    Registered
    2026-08-10 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    130.12.181.27 is on Spamhaus DROP · facebooka101giris.help resolved to it 2026-11-04 23:50 UTC
    Addresses
    130.12.181.27 · United States · AS197769 VPSDEDICATED-AS VPS Dedicated LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. rekemonedasi-facebook.org US · AS13335 · Cloudflare, Inc.4 addressesContains “facebook”
    Reported by PhishDestroyCloudflare
    DetailsHide
    Domain
    rekemonedasi-facebook.org
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-08-09 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · rekemonedasi-facebook.org · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.74.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.157.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4a70
    2606:4700:3036::ac43:9ded
    Cloudflare
    Cloudflare (104.21.74.112, 172.67.157.237): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. meta-verified.live DE · AS47846 · SEDO-AS SEDO GmbHContains “meta-verified”
    Listed by CERT PolskaParking page · Sedo
    DetailsHide
    Domain
    meta-verified.live
    Match
    A domain containing “meta-verified”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-07-21 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by CERT Polska
    Listed by CERT Polska · meta-verified.live · Listed by CERT Polska 2026-07-21 09:44 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. metaforbusiness.live DE · AS47846 · SEDO-AS SEDO GmbHContains “metaforbusiness”
    Listed by CERT PolskaParking page · Sedo
    DetailsHide
    Domain
    metaforbusiness.live
    Match
    A domain containing “metaforbusiness”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-07-18 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by CERT Polska
    Listed by CERT Polska · metaforbusiness.live · Listed by CERT Polska 2026-07-20 16:56 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. meta-for-business.help DE · AS47846 · SEDO-AS SEDO GmbHContains “meta-for-business”
    Listed by CERT PolskaParking page · Sedo
    DetailsHide
    Domain
    meta-for-business.help
    Match
    A domain containing “meta-for-business”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .help zone file, already registered
    Registered
    2026-07-17 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by CERT Polska
    Listed by CERT Polska · meta-for-business.help · Listed by CERT Polska 2026-07-17 20:49 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. messenger-ads.online RU · AS197695 · AS-REGRU "Domain names regi…Contains “messenger”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    messenger-ads.online
    Match
    A registered domain containing “messenger”, one of the names we match for Facebook
    Zone file copy
    2026-10-31 · the day of the .online zone file copy it was found in
    Registered
    2026-07-13 · Registrar of Domain Names REG.RU LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    95.163.244.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · messenger-ads.online resolved to it 2026-11-04 23:50 UTC
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. facebookadidas.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebookadidas.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-03 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebookadidas.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. facebooklululemon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebooklululemon.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-03 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebooklululemon.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. facebookdisney.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebookdisney.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-01 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebookdisney.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. facebooktencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebooktencent.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-01 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebooktencent.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. adobe-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    adobe-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · adobe-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. chanel-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    chanel-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · chanel-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. citi-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    citi-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · citi-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. facebook-alibaba.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-alibaba.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-alibaba.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. facebook-cisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-cisco.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-cisco.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. facebook-kellanova.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-kellanova.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-kellanova.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. facebook-kfc.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-kfc.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-kfc.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. facebook-kia.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-kia.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-kia.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. facebook-paypal.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-paypal.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-paypal.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. facebook-pfizer.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-pfizer.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-pfizer.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. facebook-shell.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-shell.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-shell.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. facebook-sony.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-sony.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-sony.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. facebook-walmart.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-walmart.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-walmart.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. gucci-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    gucci-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gucci-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. honda-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    honda-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · honda-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. hyundai-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    hyundai-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hyundai-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. kfc-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    kfc-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kfc-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. nestle-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    nestle-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nestle-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. netflix-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    netflix-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · netflix-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. nvidia-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    nvidia-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nvidia-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. pfizer-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    pfizer-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · pfizer-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. prada-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    prada-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. rolex-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    rolex-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · rolex-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. unilever-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    unilever-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · unilever-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. uniqlo-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    uniqlo-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · uniqlo-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. youtube-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    youtube-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · youtube-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. facebook-apple.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-apple.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-apple.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. facebook-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    facebook-nintendo.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebook-nintendo.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. gillette-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    gillette-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. hsbc-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    hsbc-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. caterpillar-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    caterpillar-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · caterpillar-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. shopify-facebook.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “facebook”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    shopify-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-26 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shopify-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. facebookonline.cloud IT · AS31034 · ARUBA-ASN Aruba S.p.A.Contains “facebook”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    facebookonline.cloud
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-04-17 · Tucows Domains Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    62.149.128.40 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · facebookonline.cloud resolved to it 2026-11-04 23:50 UTC
    Addresses
    62.149.128.40 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    MX
    mx.facebookonline.cloud
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. service-messenger.xyz JP · AS7506 · GMO Internet, Inc.Contains “messenger”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    service-messenger.xyz
    Match
    A registered domain containing “messenger”, one of the names we match for Facebook
    Zone file copy
    2026-10-31 · the day of the .xyz zone file copy it was found in
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · service-messenger.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. variable-facebook-containerd.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    variable-facebook-containerd.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-facebook-containerd.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. variable-smalltalk-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    variable-smalltalk-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-smalltalk-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. vcenter-skopeo-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    vcenter-skopeo-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vcenter-skopeo-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. vector-duty-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    vector-duty-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vector-duty-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. vector-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    vector-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vector-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. verilog-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    verilog-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. voter-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    voter-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · voter-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. voter-objective-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    voter-objective-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · voter-objective-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. wasm-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wasm-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. watch-facebook-happiness.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    watch-facebook-happiness.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · watch-facebook-happiness.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. weakness-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    weakness-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · weakness-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. websphere-shop-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    websphere-shop-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · websphere-shop-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. wet-streamlit-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wet-streamlit-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wet-streamlit-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. whatsapp-pytorch-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whatsapp-pytorch-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whatsapp-pytorch-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. who-facebook-kaggle.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    who-facebook-kaggle.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · who-facebook-kaggle.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. whose-glassfish-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whose-glassfish-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whose-glassfish-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. why-kube-router-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    why-kube-router-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · why-kube-router-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. why-spice-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    why-spice-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · why-spice-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. why-wrong-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    why-wrong-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · why-wrong-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. world-before-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    world-before-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · world-before-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. xen-cordova-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    xen-cordova-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · xen-cordova-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. zabbix-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    zabbix-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · zabbix-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. zabbix-opengl-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    zabbix-opengl-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · zabbix-opengl-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. zeplin-height-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    zeplin-height-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · zeplin-height-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. microsoft-facebook-digital.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    microsoft-facebook-digital.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-facebook-digital.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. instance-facebook-bokeh.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    instance-facebook-bokeh.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-facebook-bokeh.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. integer-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    integer-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · integer-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. integration-facebook-clojure.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    integration-facebook-clojure.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · integration-facebook-clojure.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. integration-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    integration-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · integration-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. integration-opengl-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    integration-opengl-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · integration-opengl-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. interface-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    interface-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · interface-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. internet-facebook-bravery.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    internet-facebook-bravery.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · internet-facebook-bravery.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. ionic-flavor-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    ionic-flavor-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ionic-flavor-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. istio-metrics-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    istio-metrics-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · istio-metrics-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. javascript-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    javascript-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · javascript-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. javascript-slack-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    javascript-slack-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · javascript-slack-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. jboss-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jboss-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jboss-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. jetty-podman-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jetty-podman-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-podman-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. jira-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jira-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jira-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. jira-volume-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jira-volume-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jira-volume-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. jitter-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jitter-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jitter-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. joy-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    joy-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · joy-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. jquery-planet-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jquery-planet-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jquery-planet-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. julia-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    julia-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · julia-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. jupyter-global-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jupyter-global-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jupyter-global-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. kata-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    kata-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kata-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. kibana-store-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    kibana-store-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kibana-store-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. kubernetes-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    kubernetes-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kubernetes-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. labview-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    labview-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · labview-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. laptop-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    laptop-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · laptop-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. latency-facebook-health.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    latency-facebook-health.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · latency-facebook-health.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. lattice-facebook-glass.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    lattice-facebook-glass.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · lattice-facebook-glass.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. layer-protobuf-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    layer-protobuf-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · layer-protobuf-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. leader-ember-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    leader-ember-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · leader-ember-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. ledger-which-facebook.xyz JP · AS7506 · GMO Internet, Inc.Contains “facebook”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    ledger-which-facebook.xyz
    Match
    A domain containing “facebook”, one of the names we match for Facebook
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ledger-which-facebook.xyz resolved to it 2026-11-04 23:50 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Social media

All brands →