Phishing sites impersonating Facebook

PhishDestroy has recorded 1,431 phishing domains impersonating Facebook since 2025-09-10, 18 of them in the last 30 days. The most used registrars are Cloudflare and Gransy, s.r.o; the most common TLDs are .com and .dev. The official Facebook domain is facebook.com: any other site asking for your login or wallet is not Facebook.

1,431
Domains, all time
18
Last 30 days
533
Online at last check
176
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 102026-07-26: 62026-07-27: 72026-07-28: 82026-07-29: 112026-07-30: 62026-07-31: 72026-08-01: 102026-08-02: 92026-08-03: 22026-08-04: 12026-08-05: 42026-08-06: 42026-08-07: 22026-08-08: 132026-08-09: 52026-08-10: 62026-08-11: 32026-08-12: 12026-08-13: 42026-08-14: 42026-08-15: 42026-08-16: 32026-08-17: 52026-08-18: 72026-08-19: 02026-08-20: 32026-08-21: 62026-08-22: 32026-08-23: 22026-08-24: 12026-08-25: 12026-08-26: 22026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 172026-09-01: 12026-09-02: 62026-09-03: 42026-09-04: 72026-09-05: 42026-09-06: 42026-09-07: 42026-09-08: 32026-09-09: 22026-09-10: 62026-09-11: 42026-09-12: 82026-09-13: 52026-09-14: 52026-09-15: 52026-09-16: 22026-09-17: 142026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 12026-09-24: 02026-09-25: 12026-09-26: 12026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 12026-10-04: 02026-10-05: 02026-10-06: 22026-10-07: 22026-10-08: 02026-10-09: 02026-10-10: 12026-10-11: 12026-10-12: 02026-10-13: 32026-10-14: 12026-10-15: 02026-10-16: 12026-10-17: 02026-10-18: 12026-10-19: 12026-10-20: 02026-10-21: 02026-10-22: 1
Facebook phishing domains detected per day: 279 from 2026-07-25 to 2026-10-22; peak 17.

How to tell a fake Facebook site

Official domain: facebook.com.

Words most often added to the brand in reported domains: meta, invoice, ads, agency, biz, program, support, login, center, account.

  • Type the address yourself or use a bookmark; phishing links for Facebook arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Facebook does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Facebook phishing domains

The 50 most recently detected domains impersonating Facebook
DomainFirst detectedStatus at last checkRegistrar
m-faceboooks.com.vn2026-10-22Online—
theholyoliveoil.com2026-10-19OnlineGoDaddy.com
bluebellsburrow.shop2026-10-18OnlineDynadot
bigfoodie.shop2026-10-16OnlineDynadot
nfacebook.vn2026-10-14Online—
facebook-secure-my-account.brothersexpeditions.com2026-10-13OnlineHOSTINGER operations
facebook.web1click.com2026-10-13OnlineINET
kreyolinter.com2026-10-13OnlineWild West Domains
mfacebooks.com.vn2026-10-11Online—
mfacebookk.com.vn2026-10-10Online—
facebook.shopweb.com.vn2026-10-07Unknown—
facebook-spotted-slike.infy.click2026-10-07OnlineSpaceship
facebookbonus.emmanueldegreatltd.com2026-10-06OnlinePublicDomainRegistry.com
facebookcustomer-service.com2026-10-06OnlineDynadot
facebook.hosweb.online2026-10-03OnlineNAMECHEAP
facbook-marketplce-vehicles-cars-item4109524175.bringolf2you.com2026-09-26OnlineDreamscape Networks
viewdetail2209foqcdb.communitysupportsvchub.com2026-09-25OfflineOnamae.com
smartsystemfromfacebook.com2026-09-23OfflineMainReg
facebook-case-business.com2026-09-17OnlineCloudflare
bluebadgeteamcheck.vercel.app2026-09-17OfflineVercel
meta-seven-sigma.vercel.app2026-09-17OfflineVercel
verifiedbadge-axel.vercel.app2026-09-17OfflineVercel
meta-verified-blueticks-fb11.vercel.app2026-09-17OfflineVercel
metabluads.vercel.app2026-09-17OfflineVercel
facebook-visitantes.blogspot.com2026-09-17OnlineGoogle Blogger
facebook.sagers.com2026-09-17OnlineNetwork Solutions
real-facebook.blogspot.com2026-09-17OnlineGoogle Blogger
business-metta-integrity.vercel.app2026-09-17OfflineVercel
form-p5x4.vercel.app2026-09-17OfflineVercel
fb-meta-verified-3658-tau.vercel.app2026-09-17OfflineVercel
verifiedbadge-azex.vercel.app2026-09-17OfflineVercel
facbookapp.vercel.app2026-09-17OnlineVercel
rekemonedasi-facebook.org2026-09-16OnlineDynadot
submitcase-92841074.com2026-09-16OnlineName.com
accountassistcenter.vercel.app2026-09-15OfflineVercel
steep-bread-64eb.3264374055.workers.dev2026-09-15OfflineCloudflare Workers
face-book-1.blogspot.com2026-09-15OnlineGoogle Blogger
metapay.facebook-secure.shop2026-09-15OfflineGlobal Domain
fb-meta-verified-68149.vercel.app2026-09-15OnlineVercel
form.loginco.casa2026-09-14OnlineName.com
insta1login.github.io2026-09-14OfflineGitHub Pages
fcebook-clone.vercel.app2026-09-14OnlineVercel
ivanaalawikepnew.blogspot.com2026-09-14OnlineMarkMonitor
facebook-fields-validation-card-expand-logic.vercel.app2026-09-14OnlineVercel
facebook-ba.blogspot.com2026-09-13OnlineMarkMonitor
ai-app.icu2026-09-13OfflineDynadot
secure-meta.official-program.online2026-09-13OfflineNameSilo
facebooklogin01.blogspot.com2026-09-13OnlineGoogle Blogger
rainbow-kataifi-98620f.netlify.app2026-09-13OnlineNetlify
facebook-badge.com2026-09-12OfflineName.com

All 1,431 Facebook reports

Where they are registered and hosted

Registrars

  1. Cloudflare314
  2. Gransy, s.r.o219
  3. Google148
  4. Google Blogger148
  5. GitHub103
  6. Vercel52
  7. Vercel45
  8. GOOGLE (ASN: 15169)40

Top-level domains

  1. .com640
  2. .dev314
  3. .app140
  4. .io110
  5. .sh35
  6. .vn18
  7. .shop13
  8. .site10

Hosting networks

  1. Cloudflare, Inc.278
  2. Google LLC192
  3. FACEBOOK - Facebook, Inc., US150
  4. Amazon.com, Inc.114
  5. GOOGLE - Google LLC, US103
  6. CLOUDFLARENET - Cloudflare, Inc., US100
  7. CLOUDFLARENET, US69
  8. Fastly, Inc.57

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Facebook; share of all PhishDestroy reports: 0.64%.