Highscore 48 · flagged Monday, October 26, 2026

facebookhoutaifuwu.shop

Appeared in the .shop zone on Monday, October 26, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: facebook
+30
form on a brand-styled page
matched: has_form
+18
Registrar
—
Nameserver provider
Nameservers
a7.share-dns.com, b7.share-dns.net
First-day state
active website
HTTP status
200
Page title
Facebook自动插件 · 管理后台
Has a form
yes
Brand echoed
facebook

Model opinions

Second opinionlooks like abusetarget: Facebookconfidence 65%· claude-opus-5-5

The page is the operator admin panel of a 'Facebook自动插件' (Facebook auto-plugin), with customers, tasks, batches, global dedup, invite codes for binding Facebook account IDs, and AI keyword and image generation. It is a bulk Facebook-automation tool under a name built on the Facebook brand, not a credential phish: it uses its own teal 'F' logo and explicitly says not to enter a Facebook password.

First passlooks like phishingtarget: Facebookconfidence 95%· claude-haiku-4-5

The domain impersonates Facebook with 'facebook' in the name and displays a login page titled 'Facebook自动插件 · 管理后台' (Facebook Auto Plugin Admin Panel) with Facebook branding (logo with 'F'). The page presents a credential capture form (username/email and password fields) that posts to itself with no offsite links, a classic phishing pattern designed to steal administrator credentials from users who believe they are accessing a legitimate Facebook tool.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Monday, October 26, 2026

Screenshot of facebookhoutaifuwu.shop taken by the zone census on 2026-10-26

Same data as JSON: /api/zone/domain/facebookhoutaifuwu.shop. This page is not indexed by search engines and does not link to the site it describes.