meta-id17627[.]program-ads-agency[.]com

This domain, meta-id17627.program-ads-agency.com, is an active phishing site designed to deceive users into disclosing sensitive account credentials. The site mimics an Accounts Centre login portal, likely targeting users of social media or financial platforms under false pretenses. Analysis indicates the page employs visual and structural elements identical to legitimate authentication interfaces, increasing the likelihood of successful credential harvesting. The threat extends beyond individual compromise, as stolen credentials may facilitate secondary attacks, including account takeovers or financial fraud. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on April 17, 2026, through Gransy, s.r.o., a registrar frequently associated with abusive registrations. It resolves to the IP address 172.66.0.96, hosted by Cloudflare, Inc., which is commonly exploited to obscure origin servers and evade detection. Detection metrics further substantiate the threat: 17 out of 95 security vendors on VirusTotal flag the domain as malicious, and it appears on at least one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), provides a veneer of legitimacy while failing to mitigate the underlying risk. Users who have visited meta-id17627.program-ads-agency.com or entered credentials on the site should take immediate remedial action. First, revoke access to any accounts potentially exposed and update passwords using a unique, complex string for each service. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor linked accounts for suspicious activity, such as unrecognized logins or transactions. If financial information was disclosed, contact relevant institutions to report potential fraud. Finally, scan local devices for malware, as phishing sites may deploy additional payloads to maintain persistence or exfiltrate data.