busines-app[.]accounts-admin-agency[.]com

This domain, busines-app.accounts-admin-agency.com, is flagged as a credential phishing infrastructure designed to harvest user account credentials through a fraudulent Accounts Centre interface. Analysis indicates the site employs Node.js and React frameworks, delivered via Cloudflare’s HTTP/3 network, to create a convincing but malicious login portal. The domain’s technical stack includes Next.js and Webpack, which are commonly used in legitimate applications but have been repurposed here to evade basic detection mechanisms. Evidence supporting this assessment includes multiple concrete indicators. The domain was registered on May 01, 2026, through Gransy, s.r.o., a registrar frequently associated with high-risk domains. Security vendors on VirusTotal flagged the domain at a rate of 19 out of 95, indicating widespread detection as malicious. Additionally, the domain appears on one security blocklist and resolves to the IP address 162.159.140.98, a Cloudflare endpoint often exploited for phishing campaigns. The Gridinsoft trust score of 0/100 further corroborates its fraudulent nature. Users who visited busines-app.accounts-admin-agency.com or entered credentials on the site should immediately take corrective actions. First, reset passwords for any accounts accessed through the domain, prioritizing financial or sensitive services. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for unusual activity, such as unauthorized transactions or login attempts from unfamiliar locations. If personal or financial data was submitted, consider reporting the incident to relevant authorities and credit monitoring services to prevent potential identity theft.