agencycentre-meta[.]com

This domain is flagged as an elevated-risk generic phishing site designed to harvest user credentials through a fraudulent Accounts Centre interface. Analysis indicates the threat specifically mimics authentication portals, likely targeting users of social media, financial services, or enterprise platforms under the guise of account verification or security updates. The page title Accounts Centre is a common tactic to deceive users into believing they are interacting with a legitimate service provider, increasing the likelihood of credential theft or subsequent account compromise. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain agencycentre-meta.com was registered on October 21, 2025, through Name SRS AB, a registrar frequently associated with recently created phishing domains. It resolves to IP address 104.21.21.184, hosted on AS13335 (Cloudflare, Inc.), a network often exploited to obfuscate origin servers and evade takedowns. The domain appears on two security blocklists—PhishDestroy and PhishingDB—and is flagged by 17 out of 95 security vendors on VirusTotal. The SSL certificate is issued by WE1, a low-assurance provider commonly used in phishing campaigns. The site has since been taken offline, though historical records confirm its operational status during the active threat window. To mitigate risks associated with generic phishing sites like agencycentre-meta.com, users should immediately revoke any credentials entered on the portal and enable multi-factor authentication on all associated accounts. Organizations should block the domain and IP at the network perimeter and monitor for anomalous login attempts from internal users. Security teams are advised to review logs for connections to 104.21.21.184 or domains registered through Name SRS AB within the October 2025 timeframe. Endpoint protection should be updated to include the domain in real-time blocklists, and employees should be reminded to verify URLs before entering sensitive information, particularly when prompted by unsolicited account verification requests.