ad-account-supervision-panel[.]pages[.]dev

The domain ad-account-supervision-panel.pages.dev was registered on March 03, 2026 through Cloudflare, Inc. and resolves to the IP address 31.13.66.35, an AS13335 Cloudflare node located in the United States. The site presented an HTTPS endpoint secured by a Google Trust Services / WE1 certificate, employed HTTP Strict Transport Security (HSTS) and communicated over HTTP/3, indicating use of modern Cloudflare edge services. The page title returned by the server was "Facebook - log in or sign up," matching a declared brand impersonation of Facebook. An HTTP 403 response was observed, and the domain is currently marked offline.

Reputation metrics are uniformly negative: Gridinsoft assigned a trust score of 0 / 100, Scamadviser reported a trust score of 1 / 100, and the domain appears on one known security blocklist. It has been blocked by PhishDestroy and was flagged by 12 of 93 security vendors on VirusTotal. The authoritative nameservers are etienne.ns.cloudflare.com and maisie.ns.cloudflare.com.

This evidence set confirms that the domain was leveraged as a Facebook brand‑impersonation vector, likely to harvest credentials or drive malicious traffic. Defenders should immediately add the domain to blocklists, enforce URL filtering for the exact host, and monitor for similarly structured subdomains under the pages.dev namespace. Given the use of Cloudflare’s shared infrastructure, future malicious actors may replicate this pattern, so threat‑intel feeds should be updated with the observed indicators of compromise, including the IP address, SSL fingerprint, and registrar information to improve detection latency.