facebook[.]apps[.]waypoint[.]agency

PhishDestroy identifies facebook.apps.waypoint.agency as an active crypto-draining impostor mimicking Facebook’s login interface. Visitors risk losing cryptocurrency if they enter wallet credentials or connect a wallet on the page. The site’s interface mirrors Facebook’s branding to trick users into approving malicious transactions or revealing seed phrases. Because the page looks legitimate at a glance, even cautious users can be deceived, making this a high-consequence threat for anyone interacting with the domain.

This domain was flagged by 15 out of 95 VirusTotal security vendors and is already blocked by Phishunt and PhishingArmy. It resolves to IP address 158.69.193.122, uses a Let’s Encrypt SSL certificate for added credibility, and has been added to multiple security blocklists. Domain registration records show it was created recently—well after Meta’s official domains—further indicating malicious intent. Registrar data points to a privacy-protected entity, a common tactic to obscure ownership and hinder takedown efforts.

If you visited facebook.apps.waypoint.agency, immediately disconnect from the site. Do not enter credentials, connect a wallet, or approve any transactions. Scan your device with updated antivirus software. Revoke any wallet connections you may have authorized on the site using your wallet’s connection manager. Report the incident to your wallet provider and change passwords only if you reused credentials elsewhere. For verification, use PhishDestroy’s real-time lookup tool to confirm whether a domain is safe before interacting with it.