payment-account[.]program-ads-agency[.]com

The domain payment-account.program-ads-agency.com is currently active and classified under the specific threat type of brand_impersonation. It targets Facebook, as evidenced by the page title 'Accounts Centre,' which mimics legitimate Facebook account management interfaces. The domain remains operational, presenting an ongoing risk to users who may mistake it for an official Facebook service.

Analysis of technical indicators reveals the following: the domain is flagged by 18 of 95 security vendors on VirusTotal, indicating a significant level of detection. It was registered through Gransy, s.r.o., on April 17, 2026, and resolves to the IP address 172.66.0.96. The domain appears on one security blocklist, and its SSL certificate is issued by Google Trust Services (WE1). The creation date is notably in the future, which may suggest an attempt to evade immediate detection or correlation with known malicious campaigns.

Given the elevated risk level and active status of this domain, immediate action is recommended. Network administrators should block the domain and its associated IP address (172.66.0.96) at the perimeter. Users should be educated to recognize brand_impersonation tactics, particularly those mimicking Facebook's login or account management pages. Monitoring for further indicators of compromise, such as unusual login attempts or credential harvesting activity, is advised. The domain's infrastructure and registration details should be reviewed for potential links to broader malicious campaigns.