meta-care[.]program-ads-agency[.]com

This domain, meta-care.program-ads-agency.com, is actively engaged in credential theft targeting users of Meta's Accounts Centre. Analysis indicates the site impersonates the legitimate Meta login interface, tricking visitors into submitting their account credentials. The threat specifically focuses on harvesting usernames, passwords, and potentially two-factor authentication codes, which could lead to unauthorized access to linked social media profiles, financial accounts, or other sensitive platforms. Infrastructure analysis reveals the domain was registered on April 17, 2026, through Gransy, s.r.o., and currently resolves to the IP address 172.66.0.96, hosted behind Cloudflare infrastructure in Canada. The domain appears on one security blocklist and is flagged by 21 out of 95 security vendors on VirusTotal as malicious. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend false legitimacy to phishing sites. The page title, "Accounts Centre," directly mirrors Meta's official branding, increasing the likelihood of successful deception. Users who have visited meta-care.program-ads-agency.com should immediately reset their Meta account credentials, including any passwords reused across other platforms. Enable multi-factor authentication if not already active, and review recent account activity for unauthorized logins or changes. Monitor linked email accounts for suspicious password reset requests or phishing attempts. If credentials were entered on this domain, assume they are compromised and take steps to secure all associated accounts. Report the incident to the platform's security team for further investigation and potential account recovery assistance.