meta-payment.program-ads-agency.com: Fake Login Portal Confirmed

This domain, meta-payment.program-ads-agency.com, is flagged as a confirmed phishing site impersonating a login portal under the page title 'Accounts Centre.' Analysis indicates the threat type is a fake login page designed to harvest user credentials, likely targeting social media or financial account access. No specific brand impersonation or crypto drainer kit signatures were identified, but the page structure and title suggest a generic credential phishing campaign. Infrastructure analysis reveals the domain was registered on April 17, 2026, through Gransy, s.r.o., and resolves to the IP address 172.66.0.96, hosted on Cloudflare infrastructure in Canada. The SSL certificate is issued by Google Trust Services (WE1). The domain appears on one security blocklist and is detected by 22 out of 95 security vendors on VirusTotal, confirming its malicious classification. No Google Safe Browsing (GSB) entries were reported at the time of analysis. The domain remains active and poses an elevated risk due to its credential-harvesting capabilities. Immediate response actions include blocking the domain at the DNS and proxy levels, as well as flagging the IP 172.66.0.96 for monitoring. Users are advised to reset credentials if they interacted with the site and to verify SSL certificates for legitimacy before entering sensitive information. The remaining risk is classified as elevated due to the domain's recent registration and low blocklist prevalence, which may allow it to evade detection in some environments.