advertising-account-scan-control-hub[.]pages[.]dev
“Facebook – log in or sign up”
advertising-account-scan-control-hub.pages.dev — Dapat dijangkau · akses dibatasi (HTTP 403). Peniruan identitas merek: Facebook; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 16/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); Google Safe Browsing flagged; PhishDestroy score 100/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain advertising-account-scan-control-hub.pages.dev was registered on March 03, 2026 through Cloudflare and uses Cloudflare name servers (rafe.ns.cloudflare.com, stanley.ns.cloudflare.com). It resolves to IP address 157.240.0.35, an address associated with Facebook infrastructure, but the IP is announced by AS13335 Cloudflare, Inc., indicating the site is hosted behind Cloudflare's reverse‑proxy service. The site presented a page title "Facebook – log in or sign up", directly referencing the Facebook brand, and the threat classification in the intelligence set is Brand Impersonation targeting Facebook. Security scanners have flagged the domain: 16 out of 93 VirusTotal vendors report it as malicious, Google Safe Browsing lists it under social engineering, PhishDestroy has blocked it, and it appears on one additional security blocklist.
Reputation services assign extremely low trust scores (Scamadviser 1/100, Gridinsoft 0/100). The site served HTTPS using a Google Trust Services / WE1 certificate, employed HSTS and HTTP/3, and returned an HTTP 403 status before being taken offline. The combination of brand‑specific page title, low trust scores, multiple vendor detections, and blocklist listings provides concrete evidence that the domain was being used for a Facebook impersonation campaign.
Uncertainty remains regarding the exact content served before takedown, as the current HTTP 403 response prevents content inspection, and no phishing kit or payload details are disclosed. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the domain and its subdomains, and add the IP address to deny lists. Organizations should also educate users about unsolicited login prompts referencing Facebook, and employ email and web gateway filters that reference the observed indicators (domain, IP, and Google Safe Browsing classification).
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Intelijen Forensik
Teknologi · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of advertising-account-scan-control-hub.pages.dev · checked Apr 11, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive