meta-id17636[.]program-ads-agency[.]com

The domain meta-id17636.program-ads-agency.com has been identified as a sophisticated phishing site designed to impersonate the Meta Accounts Centre, targeting users with a fake login page to steal credentials. This threat is classified as credential theft, not merely generic phishing, as it specifically mimics the Meta brand to harvest sensitive account information. Currently, the domain is offline, having been taken down after security researchers flagged its malicious activity.

PhishDestroy's analysis reveals that this domain was created on April 17, 2026, and is registered through Gransy, s.r.o., a registrar known for hosting malicious domains. It resolves to IP address 162.159.140.98 and uses an SSL certificate issued by Google Trust Services (WE1), which unfortunately lends a false sense of legitimacy. The domain appears on one security blocklist, but its impact is broader: VirusTotal reports that 17 out of 95 security vendors flag this domain as malicious, indicating a moderate to high level of threat. The page title was found to be "Accounts Centre," directly mimicking Meta's official account management interface.

Given that the domain is now offline, the immediate risk of active compromise is reduced. However, users who may have interacted with the site before its takedown should change their Meta account passwords immediately and enable two-factor authentication. Organizations should block the domain and IP 162.159.140.98 at the network level to prevent any residual connections. PhishDestroy recommends monitoring for any related domains or variations of this threat, as similar impersonation campaigns may emerge. Always verify URLs before entering credentials, especially when redirected from unsolicited messages or emails.