meta-id90016[.]agency-manager-support[.]com

The domain meta-id90016.agency-manager-support.com is currently active and engaged in credential theft targeting Meta (formerly Facebook) account holders. Analysis indicates the site impersonates Meta's Accounts Centre to deceive users into submitting login credentials, enabling unauthorized access to personal and financial information. This campaign is classified as elevated risk due to its targeted nature and potential for significant user impact. Infrastructure analysis reveals the domain was registered on May 7, 2024, through Gransy, s.r.o., a registrar frequently associated with malicious activity. It resolves to the IP address 172.66.0.96, hosted by a content delivery network provider in Canada. Detection metrics show 19 of 95 security vendors on VirusTotal flag the domain as malicious, while it appears on one additional security blocklist. The SSL certificate, issued by Google Trust Services (WE1), further suggests an attempt to appear legitimate, though this does not mitigate the underlying threat. Current status confirms the domain remains operational, with no evidence of takedown or mitigation efforts. Organizations and individuals are advised to block the domain and IP address at the network level, implement multi-factor authentication for all Meta accounts, and conduct user awareness training to recognize phishing indicators. Endpoint protection solutions should be updated to include this domain in their threat intelligence feeds, and affected users should immediately reset credentials if exposure is suspected.