join-program[.]credit-agency-meta[.]com

PhishDestroy identifies join-program.credit-agency-meta.com as a live phishing domain masquerading as a legitimate credit agency to harvest sensitive financial information. This domain was flagged under active investigation for generic phishing tactics, including spoofed branding and fake credit program enrollment pages designed to trick users into entering personal or banking details. The threat is classified as high-risk due to its immediate potential for credential theft and financial fraud, with no current VirusTotal detections (24/95) despite clear malicious intent. This domain resolves to IP address 172.67.192.39 and was registered through Gransy, s.r.o. on November 12, 2025. Notably, it utilizes a Google Trust Services SSL certificate to appear legitimate, which may lower user suspicion. The domain remains undetected on VirusTotal as of the latest scan, indicating a low initial detection rate despite active phishing operations. This pattern suggests either a newly deployed campaign or one that has evaded conventional signature-based detection systems. Users who have visited or interacted with this domain should immediately cease any data entry and scan their devices for malware. Review financial accounts for unauthorized transactions and change passwords for any accounts that may have been exposed. Report the domain to your security team or through PhishDestroy’s submission portal using seed dd7cb3. Disable autofill for forms on this site and consider blocking the domain at the network level to prevent further exposure. Monitor for phishing emails referencing this domain as attackers may use it in follow-up social engineering attacks.