facebook-request[.]program-ads-agency[.]com

The domain facebook-request.program-ads-agency.com is currently active and classified as an elevated brand impersonation threat targeting Facebook. The domain impersonates Facebook’s Accounts Centre, potentially misleading users into revealing sensitive information.

Analysis indicates that the domain is flagged by 22 of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through Gransy, s.r.o., and resolves to the IP address 162.159.140.98, which is located in Canada and is associated with Cloudflare, Inc. The SSL certificate for this domain is issued by Google Trust Services / WE1, which could lend a false sense of security to unsuspecting users. The domain was created on May 04, 2026, and currently appears on one security blocklist. The page title, 'Accounts Centre,' further adds to the deception by mimicking legitimate Facebook services.

Given the current active status and elevated risk level, it is recommended that users avoid interacting with this domain. Organizations should update their security policies to block this domain and educate employees about the signs of brand impersonation. Additionally, network administrators should monitor for any traffic directed to 162.159.140.98 and consider implementing DNS blacklisting or web filtering solutions to prevent access. Regularly updating security tools and maintaining a vigilant stance against phishing activities will help mitigate the potential impact of this threat.