member04[.]agency-ad-meta[.]com

This domain, member04.agency-ad-meta.com, is flagged for brand_impersonation targeting Meta, specifically mimicking the Meta Business Help Centre. The threat involves presenting a fraudulent support interface designed to harvest credentials, payment details, or other sensitive information from users attempting to access legitimate Meta business services. The page title 'Meta Business Help Centre' directly aligns with Meta's official branding, increasing the likelihood of successful deception among business account holders and advertisers. Analysis indicates the domain was registered on May 12, 2026, through Gransy, s.r.o., and is currently offline. It appears on one security blocklist and is flagged by 21 out of 95 security vendors on VirusTotal. The domain resolves to the IP address 104.21.17.106, hosted by Cloudflare, Inc. in Canada, and uses a Let's Encrypt SSL certificate (E7). The combination of a recently created domain, low blocklist prevalence, and Cloudflare hosting suggests an attempt to evade detection while maintaining operational security. Users who visited this domain should immediately revoke any credentials entered on the site and monitor associated accounts for unauthorized activity. If payment details were submitted, financial institutions should be notified to prevent fraudulent transactions. System logs should be reviewed for signs of compromise, and any downloaded files or scripts from the domain should be treated as malicious. Organizations are advised to block the domain and its resolving IP at the network level to prevent further exposure.