busines[.]ads-program-agency[.]com

This domain is flagged for hosting a Facebook credential phishing page under the guise of an "Accounts Centre" interface. Analysis indicates the site was designed to harvest user authentication details by impersonating legitimate Facebook account management portals, a common tactic in credential theft campaigns targeting social media platforms. The page title "Accounts Centre" directly mirrors Facebook's branding, increasing the likelihood of successful deception among users attempting to manage their accounts or resolve security issues. Infrastructure analysis reveals the domain was registered on April 03, 2026, through Gransy, s.r.o., and currently resolves to the IP address 104.21.68.135, hosted behind Cloudflare's network in Canada. The domain appears on one security blocklist and is flagged by 20 out of 95 security vendors on VirusTotal, with detections primarily categorized as generic phishing. The SSL certificate, issued by Let's Encrypt (serial number E7), provides HTTPS encryption, which may further mislead users into perceiving the site as legitimate despite its malicious intent. Users who visited busines.ads-program-agency.com should immediately revoke any entered credentials, particularly for Facebook or linked accounts. Reset passwords using a separate, trusted device and enable multi-factor authentication where available. Monitor accounts for unauthorized activity, such as logins from unfamiliar locations or devices, and report any suspicious behavior to the affected platform. If financial or personal data was submitted, consider placing a fraud alert with credit bureaus and reviewing transaction histories for irregularities. Network administrators should block the domain and associated IP (104.21.68.135) at the perimeter to prevent further access.