meta-id19239268[.]invoice-ads-program[.]com

This domain, meta-id19239268.invoice-ads-program.com, is a credential phishing site designed to harvest Facebook login credentials under the guise of an 'Accounts Centre' page. The site presents a fraudulent login interface that closely resembles legitimate Facebook account management portals, tricking users into entering their usernames, passwords, and potentially two-factor authentication codes. Such attacks enable threat actors to gain unauthorized access to victim accounts, leading to identity theft, financial fraud, or further phishing campaigns launched from compromised profiles. Analysis indicates the domain was registered on May 13, 2026, through the registrar Gransy, s.r.o., an entity frequently associated with high-risk domain registrations. The domain resolves to the IP address 162.159.140.98, hosted on Cloudflare infrastructure in Canada, which is commonly exploited to mask malicious origins. Security vendor assessments on VirusTotal show 19 out of 95 engines flagging the domain as malicious, with detections ranging from generic phishing to social engineering fraud. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of security while failing to validate the site's legitimacy. If a user has visited meta-id19239268.invoice-ads-program.com and entered credentials, immediate action is required. First, change the password for the affected Facebook account and any other platforms where the same credentials were reused. Enable two-factor authentication if not already active, using an authenticator app rather than SMS. Review recent account activity for unauthorized logins or posts, and revoke access to any suspicious third-party applications. Monitor linked email accounts for password reset attempts or unusual activity. Users should also clear browser cache and saved passwords to prevent automatic re-entry into phishing sites. Given the elevated risk level and offline status, remain vigilant for follow-up phishing attempts via email or social engineering.