recently found some weird domains listed in my Facebook events manager traffic permissions list. You get there by following that path: Meta Business Suite → Events Manager → Data Sources → Settings → scroll to bottom to Traffic Permissions → Create Allow list
Essentially: create an allowed list for your own domain and all other attempts by someone to add your pixel to their domain will be blocked
But if I read this correct, you should also create a block list for all of those other domains you don’t recognize and that currently are in the Allowed status.
All though many of these “other domains” may be innocently done (giving them the benefit of the doubt) I firmly believe many of these are linked to domains that are “bad actor” accounts or competitors using this in manipulated scripting to send you bad traffic. So like the Queen in Alice in Wonderland, “off with their heads” (block them all) as there seems to be no way to identify the cryptic domain names connected to my account… until I hear someone with deeper knowledge that could justify them attaching to my pixel.
I believe these are events fired from the preview window when using the test functionality of your pixel, do the dates coincide with dates you were testing your pixel events?