business-meta[.]accounts-admin-agency[.]com

PhishDestroy identifies business-meta.accounts-admin-agency.com as an active credential theft domain posing as a legitimate business administration service. This domain employs brand impersonation tactics to deceive users into surrendering sensitive login credentials, with a specific focus on mimicking official business account administration portals. The elevated risk level reflects confirmed malicious infrastructure actively harvesting user credentials under false pretenses. This domain was flagged by 15 out of 95 VirusTotal security vendors and resolves to the IP address 172.66.0.96. The domain was registered through Gransy, s.r.o. on May 01, 2026, a recently created entity with no established trust reputation. The SSL certificate issued by Google Trust Services provides a deceptive veneer of legitimacy, but the combination of fresh domain registration, low detection coverage, and suspicious infrastructure strongly indicates malicious intent. The recent creation date (2026) and low VT score suggest this operation is either newly deployed or rapidly evolving to evade blocklists. Users encountering this domain should immediately cease all interaction and avoid entering any credentials or personal information. If you suspect exposure, change passwords immediately and enable multi-factor authentication on all related accounts. Report this domain to your organization's security team and through PhishDestroy's threat submission portal to aid in blocking efforts. Network defenders should add this domain and IP address to blocklists while investigating potential lateral movement within compromised environments.