advertising-account-integrity-center[.]pages[.]dev

The domain advertising-account-integrity-center.pages.dev was registered on March 03, 2026 through Cloudflare, Inc. It resolves to the IP address 57.144.248.1, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain uses Cloudflare’s authoritative nameservers clayton.ns.cloudflare.com and romina.ns.cloudflare.com, and the TLS certificate is issued by Google Trust Services under the WE1 profile, confirming the presence of a valid HTTPS layer. HTTP probing returns a 403 status code and the server advertises HSTS and HTTP/3 support, indicating a modern Cloudflare edge configuration.

Brand‑targeted evidence includes a page title of "Facebook – Anmelden oder Registrieren," directly referencing the Facebook brand. Google Safe Browsing classifies the site as a social engineering threat, and the overall scam type is recorded as brand impersonation. Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0/100, Scamadviser a score of 1/100, and the domain appears on one public security blocklist. VirusTotal analysis shows that 16 of 93 scanning engines flagged the domain, reinforcing the malicious assessment. The site is currently listed as offline, and PhishDestroy has already blocked it.

From the available data, the infrastructure is typical of a Cloudflare‑hosted phishing campaign that leverages a legitimate‑looking TLS certificate to increase credibility. The exact content of the hosted page has not been captured, so the specific login‑capture mechanisms remain unknown. Defenders should proactively block the domain at network boundaries, add it to URL filtering and threat‑intelligence feeds, and monitor for any re‑registration attempts. Continuous observation of Cloudflare‑associated IP ranges and rapid revocation of any newly issued certificates for this domain are advisable to mitigate potential re‑use.