member01[.]agency-ad-network[.]com

This domain, member01.agency-ad-network.com, was set up to impersonate the Meta Business Help Centre, tricking users into entering their Facebook or Instagram business account credentials. The site mimics the legitimate login page, but any information submitted goes directly to cybercriminals. The threat is classified as a credential harvesting phishing attack, targeting small business owners and advertisers who rely on Meta platforms for their marketing.

PhishDestroy’s investigation uncovered multiple red flags. VirusTotal flagged the domain with 22 out of 95 security vendors, a strong indicator of malicious intent. The domain was registered on April 28, 2026, through Gransy, s.r.o., a registrar known for hosting questionable sites. It resolved to IP address 172.67.151.11 and used a Let's Encrypt SSL certificate (E8) to appear legitimate. The site has since been taken offline, and it appears on one security blocklist.

If you visited this site and entered any credentials, change your Facebook and Instagram passwords immediately and enable two-factor authentication. Monitor your accounts for unauthorized activity and report any suspicious logins to Meta. Run a full antivirus scan on your device to ensure no malware was downloaded. Stay vigilant against similar phishing attempts by always verifying URLs before entering sensitive information.