payment[.]ads-program-agency[.]com

The domain payment.ads-program-agency.com has been identified as a generic_phishing site designed to impersonate an Accounts Centre login portal. Analysis indicates this infrastructure was actively harvesting user credentials through deceptive account verification prompts. As of the latest assessment, the domain has been taken offline, though prior activity suggests it may have targeted users under the guise of a legitimate authentication service. Infrastructure analysis reveals multiple high-risk indicators associated with this domain. It was registered on March 20, 2026, through Gransy, s.r.o., and resolved to the IP address 104.21.68.135, hosted on a content delivery network in Canada. The domain was flagged by 23 of 95 security vendors on VirusTotal, indicating broad consensus on its malicious nature. Additionally, it appeared on one security blocklist and lacked a valid SSL certificate, further undermining its legitimacy. The page title, Accounts Centre, aligns with common phishing tactics used to mimic trusted login portals. Current status confirms the domain is offline, though residual risk remains due to its recent activity. Organizations and users are advised to treat any prior interactions with this domain as compromised and initiate credential rotation for affected accounts. Network administrators should block the domain and its associated IP address (104.21.68.135) at the perimeter to prevent accidental access. Monitoring for similar domains registered through the same registrar or resolving to identical infrastructure is recommended to mitigate future threats. Users should verify the authenticity of login portals by checking for HTTPS, valid SSL certificates, and domain age before entering credentials.