ad-account-control-hub-5hv[.]pages[.]dev

This domain, ad-account-control-hub-5hv.pages.dev, poses a high-risk credential theft threat by impersonating Facebook's login portal. Analysis indicates the page title explicitly mimics Facebook's official branding, displaying 'Facebook – log in or sign up' to deceive users into entering account credentials. The infrastructure is designed to closely replicate the appearance and functionality of legitimate Facebook authentication pages, increasing the likelihood of successful credential harvesting. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain is registered through Cloudflare, Inc., and resolves to IP address 157.240.0.35, hosted on AS13335 within the United States. It appears on one security blocklist and is flagged by Google Safe Browsing as phishing. VirusTotal reports 15 out of 95 security vendors detecting malicious activity associated with this domain. The SSL certificate is issued by Google Trust Services, and the domain was created on March 03, 2026, suggesting recent deployment for fraudulent purposes. Users who have visited ad-account-control-hub-5hv.pages.dev should immediately take corrective actions. Any credentials entered on this domain should be considered compromised and reset through Facebook's official channels. Affected accounts should enable multi-factor authentication and review recent login activity for unauthorized access. System scans using updated security tools are recommended to detect potential malware or follow-up threats. Organizations should block this domain at the network level and monitor for related indicators of compromise, including the resolving IP address and associated SSL certificate details.