facebook-verified[.]invoice-ads-process[.]com

facebook-verified.invoice-ads-process.com is a confirmed phishing site that specifically impersonates the Facebook brand to trick users into revealing their account credentials or personal information. The domain was taken offline after being identified as a security threat, but its registration through Gransy, s.r.o. on May 08, 2026, indicates it was set up with malicious intent. The page title 'Accounts Centre' is a direct imitation of Facebook's legitimate account management interface, designed to deceive visitors into entering sensitive data.

Technical analysis reveals that this domain was flagged by 22 out of 95 security vendors on VirusTotal, demonstrating widespread recognition of its malicious nature. It also appears on one security blocklist. The domain resolves to IP address 162.159.140.98 and uses an SSL certificate issued by Google Trust Services (WE1), which gives it an appearance of legitimacy despite being fraudulent. The combination of a recently created domain and a high number of vendor flags strongly indicates an active phishing campaign targeting Facebook users.

As the site is currently offline, the immediate risk is mitigated, but users who may have interacted with it should change their Facebook passwords and enable two-factor authentication immediately. PhishDestroy recommends avoiding any unsolicited links or messages referencing account verification or invoices, especially those directing to unfamiliar domains. Always verify URLs by hovering over links and checking for official Facebook domains like facebook.com or fb.com. Users should report any similar suspicious domains to security authorities to help prevent future attacks.