meta-id99998[.]agency-manager-support[.]com

PhishDestroy identifies meta-id99998.agency-manager-support.com as a malicious domain actively engaged in brand impersonation phishing, specifically targeting users through deceptive impersonation of legitimate support services. This domain mimics official agency management portals to harvest credentials or distribute crypto drainers under the guise of assistance. The infrastructure relies on a recently registered domain (May 07, 2026) and a Google Trust Services SSL certificate to enhance credibility, while resolving to IP 162.159.140.98. OpenPhish has already blocked this domain, and 21 out of 95 VirusTotal security vendors flag it, with inclusion on one additional blocklist indicating widespread suspicion. This domain was registered through Gransy, s.r.o., a registrar known for accommodating high-risk domains, which raises further concerns about its legitimacy. The combination of a freshly minted domain, low blocklist coverage despite high VT detection, and the use of a trusted SSL certificate suggests an opportunistic campaign leveraging newly registered infrastructure to evade immediate detection. The SSL certificate, issued by Google Trust Services, provides a false sense of security to potential victims, while the domain’s naming convention (agency-manager-support.com) is designed to appear as an official subdomain of a legitimate service. Users who visited this domain should immediately change any passwords entered on the site, enable multi-factor authentication on all associated accounts, and scan their devices for malware using reputable antivirus tools. If credentials were exposed, monitor accounts for unauthorized access and report the incident to the impersonated brand’s support team. Avoid clicking any links from unsolicited emails or messages referencing this domain, as they may lead to further compromise. For organizations, consider blocking this domain at the network level and reviewing logs for any prior interactions.