meta-id99999[.]agency-manager-support[.]com

The domain meta-id99999.agency-manager-support.com is actively engaged in credential theft, specifically impersonating Meta's authentication systems. Analysis confirms the domain is currently operational and designed to harvest login credentials under the guise of an "Accounts Centre" portal. This activity aligns with known tactics used in targeted phishing campaigns against social media and corporate account holders. Infrastructure analysis reveals the domain was registered through Gransy, s.r.o. on May 07, 2026, an unusually future-dated creation that may indicate an attempt to evade detection or expiration-based monitoring. It resolves to the IP address 162.159.140.98, hosted by Cloudflare, Inc. in Canada. The domain is flagged by 20 of 95 security vendors on VirusTotal, with one additional security blocklist (PhishDestroy) listing it as malicious. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider often exploited to lend false credibility to phishing sites. Current status indicates the domain remains active and unmitigated. Organizations and individuals are advised to block the domain and its resolving IP at the network level. Endpoint protection systems should be updated to include this domain in denylists. Users who may have interacted with the site should reset credentials for any accounts accessed during the exposure window, particularly Meta-related services. Security teams should monitor for related domains using similar naming patterns (e.g., meta-id*, agency-manager-support) and future-dated registrations from the same registrar.