I work for Meta. Do you have any examples of this on Meta platforms? (Facebook/Instagram?)
If Meta's advertising network does not enforce domain ownership verification, then it is fundamentally vulnerable to the same problem described on this blog post.
Sampled URL resolution cannot prove anything about a URL.
Reminder for adtech company employees in this thread: If you suspect a crime has taken place (e.g. if you have seen internal documentation showing that potential profit outweighed the security benefit of actually enforcing a policy), you can blow the whistle to regulators.
I do also see the occasional Bitcoin links and other linkspam on IG as well.
Edit: Dear downvoters, is this a threat to your precious growth hack, or?