supplyacc[.]com

This domain, supplyacc.com, is flagged as a credential theft operation masquerading as a premium social media account store offering instant delivery. Analysis indicates the site targets users seeking unauthorized access to platforms such as Instagram, Facebook, or Twitter, likely harvesting login credentials through fraudulent checkout processes or fake account verification forms. No direct association with a known drainer kit or brand impersonation has been observed, but the site’s structure aligns with credential harvesting schemes commonly used in account takeover fraud. Infrastructure analysis reveals the domain was registered on June 16, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently linked to high-risk domains. It currently resolves to IP address 145.79.28.5, with no prior detections on VirusTotal (0/95) or inclusion in Google Safe Browsing databases. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites. AlienVault OTX lists the domain in a single threat intelligence pulse, suggesting limited but existing awareness within the security community. No additional blocklist entries or public reports have been identified at this time. The domain remains active and unresponsive to takedown requests, posing an ongoing risk to users seeking to purchase social media accounts. Current response actions include monitoring for changes in detection status, registrar abuse reporting, and IP reputation tracking. Users are advised to avoid interacting with the site, as any submitted credentials may be exfiltrated to command-and-control servers. Organizations should block the domain and IP at the network level and monitor for related phishing campaigns targeting social media credentials. Further investigation is required to determine the full scope of the operation and potential ties to broader credential theft infrastructure.