meta-admin[.]accounts-admin-agency[.]com

PhishDestroy identifies meta-admin.accounts-admin-agency.com as a live credential phishing domain explicitly engineered to harvest login credentials under the fraudulent guise of a legitimate 'Accounts Centre' interface.

This domain constitutes a high-risk threat due to its deployment of a Google Trust Services SSL certificate and intentional mimicry of official branding, creating a false sense of legitimacy. Technical indicators underscore its malicious nature: the domain resolves to IP 172.66.0.96, was registered on May 01, 2026 (an anomalously recent creation date), and currently resides on two active security blocklists (OpenPhish and PhishingArmy). VirusTotal analysis reveals 21 out of 95 participating security vendors have flagged this domain, while registration occurred through Gransy, s.r.o., a known registrar with low oversight standards. These factors collectively validate its operational status as a credential theft platform targeting users through deceptive authentication portals.

To mitigate exposure to this threat, organizations and individual users must implement layered defenses including DNS filtering to block the domain at the network level, browser-based phishing detection tools to intercept access attempts, and user awareness training emphasizing verification of domain naming conventions and SSL issuers. Immediate takedown requests should be submitted to hosting providers and registrars, leveraging the domain’s blocklist presence and VT detections to accelerate response. Continuous monitoring for similar domains with the seed dce238 is strongly advised due to the attacker’s likely reuse of infrastructure patterns.