profile-meta[.]program-ads-agency[.]com

PhishDestroy identifies profile-meta.program-ads-agency.com as an active credential theft phishing domain targeting unsuspecting users. This domain is currently engaged in fraudulent activities designed to harvest login credentials under the guise of a legitimate service. The threat is classified as elevated due to its operational status and the presence of malicious infrastructure. This domain was flagged by 16 of 95 VirusTotal security vendors, indicating a significant level of suspicion among industry tools. Registered through Gransy, s.r.o., the domain resolves to IP address 172.66.0.96 and was created on April 17, 2026. It holds an SSL certificate issued by Google Trust Services, which may be used to lend false legitimacy to the fraudulent site. The domain’s recent creation date and low trust scores further underscore its malicious intent. Current status remains active, with no signs of takedown. Domain owners and security teams should immediately block profile-meta.program-ads-agency.com at the network and DNS levels. Users who may have interacted with this domain should reset passwords for affected accounts and enable multi-factor authentication. Report the domain to relevant authorities such as Google Safe Browsing, PhishTank, and your organization’s threat intelligence platform to prevent further propagation. Proactive monitoring of network traffic for connections to 172.66.0.96 is strongly advised to mitigate potential credential theft campaigns.