meta-support[.]program-ads-agency[.]com

This domain, meta-support.program-ads-agency.com, is actively engaged in credential phishing operations targeting users through deceptive login interfaces. Analysis indicates the site mimics legitimate account management portals, specifically presenting a page titled 'Accounts Centre' to harvest sensitive credentials such as usernames, passwords, and multi-factor authentication codes. The infrastructure is designed to exploit trust in recognizable branding, leveraging social engineering tactics to trick victims into disclosing authentication details under false pretenses. Infrastructure analysis reveals multiple technical indicators supporting the phishing classification. The domain was registered on April 17, 2026, through Gransy, s.r.o., a registrar frequently associated with high-risk domains. It resolves to the IP address 162.159.140.98, hosted on Cloudflare infrastructure in Canada, which is commonly used to obfuscate the true origin of malicious sites. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of security while failing to validate the domain's legitimacy. Security vendors have flagged this domain in 22 out of 95 scans on VirusTotal, and it appears on at least one security blocklist, further corroborating its malicious intent. Users who have visited meta-support.program-ads-agency.com or entered credentials on the site should take immediate action to mitigate risk. First, revoke any sessions associated with the compromised credentials and reset passwords for all accounts where the same or similar credentials were used. Enable multi-factor authentication where available to add an additional layer of security. Monitor accounts for unauthorized activity, including logins from unfamiliar locations or devices. If financial or sensitive personal information was entered, consider placing a fraud alert on credit files and reviewing transaction histories for irregularities. Organizations should update internal blocklists to prevent access to this domain and conduct awareness training to educate users on recognizing phishing attempts.