member6[.]agency-ad-network[.]com

This domain, member6.agency-ad-network.com, is flagged as a generic phishing resource impersonating Meta (formerly Facebook) Business Help Centre infrastructure. Analysis indicates the page title explicitly mimics official Meta support portals, suggesting intent to harvest credentials or business account details. No specific drainer kit signatures were identified, but the domain aligns with known phishing campaigns targeting social media administrators and advertisers through fraudulent help desk interfaces. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.67.151.11, hosted behind Cloudflare infrastructure in Canada. It was registered on April 27, 2026, through Gransy, s.r.o., a registrar frequently associated with high-risk domains. VirusTotal detection shows 18/95 security vendors flagging the domain as malicious, while it appears on a single blocklist maintained by an independent threat intelligence provider. The SSL certificate is issued by Let's Encrypt (serial number E8), a common choice for both legitimate and malicious sites due to its accessibility. Google Safe Browsing status is not explicitly provided, but the domain's presence on one blocklist and offline status suggest prior detection. Current status indicates the domain has been taken offline, likely following abuse reports or hosting provider intervention. Despite this, residual risk remains due to the domain's recent registration date and the potential for re-activation under different infrastructure. Organizations are advised to block the domain and associated IP at perimeter security controls, monitor for credential reuse attempts from harvested accounts, and verify any Meta Business-related communications through official channels only. The domain's registration through a high-risk registrar and use of Cloudflare obfuscation warrant continued vigilance for similar threats.