Analitik Panosu
⚠️
Bu alan adı, zararlı olarak işaretlenmiştir
Detected by 19 security vendors. Exercise extreme caution — do not enter credentials or personal information. Create a complaint draft from this stored evidence, review it, and submit it yourself to the appropriate authority.
Domain security & threat intelligence

program-system[.]invoice-ads-program[.]com

program-system.invoice-ads-program.com için kimlik avı ve güvenlik kontrolü

“Accounts Centre”

Threat verdict Critical 100/100 stored risk score
Availability Unverified No conclusive current response is stored
Risk signals
VirusTotal: 19/91 detections Spamhaus DBL: DBL_PHISH Brand impersonation: Meta
19/91 VT URLQuery: 2 May 01, 2026 Meta Brand Impersonation CA CA Brand Impersonation + more
Rapor özeti

VirusTotal: 19/91 tespit. Kayıtlı güvenlik verilerini inceleyin.

Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.

Evidence Summary
CRITICAL
Ref
59CB4ACC
Score
100/100
Mode
Evidence v1

PhishDestroy first recorded program-system.invoice-ads-program.com on May 1, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current stored risk score is 100/100.

The latest stored availability state is “Unverified” on Aug 1, 2026 at 03:13 UTC. No conclusive HTTP response is stored, so current availability remains unverified.

VirusTotal returned 19 detections from 91 scanners in the stored check on Jun 27, 2026 at 03:40 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on May 1, 2026 at 03:08 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on May 1, 2026 at 03:09 UTC. OTX pulses are community-intelligence references, not vendor verdicts. Spamhaus DBL stored the result DBL_PHISH on Jul 13, 2026 at 20:31 UTC. A stored Cloudflare Radar snapshot labels the domain malicious. No source check timestamp is stored for this field. A URLScan capture is stored, but no capture timestamp is available.

Stored context lists registrar Gransy, s.r.o., IP address 172.66.0.96, registration date Apr 23, 2026, apparent target Meta. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

Classification: CRITICAL · Stored evidence snapshot
VirusTotal
VirusTotal
19 det.
URLQuery
URLQuery
2 det.
DNS Security
5/14
CF Radar
Malicious
URLScan
URLScan
Report ↗
Gridinsoft
0/100
TLS certificate
Google Trust Services
Yaş
3 mo
Observed status
Unverified
PhishDestroy
DestroyList
Listed
Veri kapsamı VirusTotal 19 / 91 URLQuery 2 det. OTX no pulses CF Radar malicious URLScan capture stored report URLScan verdict malicious DNS engellemeleri 5/14 TLS valid certificate, 89d WHOIS 3 mo old Screenshot external capture Yönlendirme zinciri not probed Gridinsoft 0/100
Ağ Güvenliği İstihbaratı
DNS Provider Blocks 5 / 14
Cloudflare Family Cloudflare Security Controld Adblock Controld Family Controld Malware
Dangerous · Checked 14 DNS providers: Quad9, AdGuard, ControlD, CleanBrowsing & more
CF Cloudflare Radar Verdict Malicious
Phishing
View full Cloudflare Radar report

Tehdit Müdahale Pipeline

Discovery
Checks
Reports
Availability
13/14
Önleyici Keşif ve Veri Alımı
Tehdit Alındı
1/1 ✓
Tehdit Alındı
program-system.invoice-ads-program.com tespit edildi ve kapsamlı analiz için sıraya alındı
May 01, 2026
Threat Intelligence Checks
URLScan.io Capture · URLScan Verdict · Cloudflare Radar · VirusTotal · Google Safe Browsing · DNS Security Blocks · CF Radar: Malicious · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded
10/10 ✓
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
URLScan returned a malicious verdict · score 100
Jul 29, 2026
Cloudflare Radar
Scanned via Cloudflare Radar — DNS, certificates & network data
VirusTotal
19 / 91 vendors flagged on VirusTotal
Jun 27, 2026
Google Safe Browsing
May 01, 2026
DNS Security Blocks
Blocked by 5 of 14 checked DNS providers: Cloudflare family, Cloudflare security, Controld adblock, Controld family
CF Radar: Malicious
Cloudflare Radar classified this domain as phishing
Brand Impersonation
Impersonation of Meta
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
Notification Records
Sent Report Recorded
1/1 ✓
Sent Report Recorded
Stored sent-report record for registrar Gransy, s.r.o., hosting provider, 1 abuse contact
abuse@regtons.com
May 01, 2026
Yayın ve Erişilebilirlik
DestroyList Published · Availability Unverified
1/2
DestroyList Yayınlandı
May 01, 2026
Availability Unverified
The latest response is insufficient to classify current availability

Genel Engelleme Listesi Durumu

MetaMask
MetaMask
NO MATCH
ScamSniffer
ScamSniffer
NO MATCH
Polkadot
Polkadot
NO MATCH
CryptoFirewall
CryptoFirewall
NO MATCH
OpenPhish
OpenPhish
NO MATCH
PhishDestroy
PhishDestroy
SOURCE DATASET
SEAL
SEAL
NO MATCH
Enkrypt
Enkrypt
NO MATCH
Phishunt
Phishunt
NO MATCH
Codeesura
NO MATCH
DiscordPhishing
DiscordPhishing
NO MATCH

Kanıt Toplama

Stored Capture
2026-05-01 03:07 UTC
Malicious · 19/91 engines
Forensic screenshot of program-system.invoice-ads-program.com showing the phishing page layout
IP: 172.66.0.96
Gransy, s.r.o.
100d old
Google Trust Services
View Full Size URLScan Report Wayback Download

Etki Alanı Analizi

Domainprogram-system.invoice-ads-program.com
URLScan Verdict Malicious score 100 report ↗
Server / ASN cloudflare · AS13335 Cloudflare, Inc.
IP Reputation abuse score 0/100 1 report checked Jul 13, 2026
Registrar (base domain) Gransy, s.r.o
Abuse contactabuse@regtons.com
ICANN Kayıt KuruluşuICANN tarafından resmi olarak akredite edilmiş kayıt kuruluşları →
WHOIS AramaICANN RDAP for invoice-ads-program.com →
IP Address 172.66.0.96 CA
GeoCA Toronto, CA
NetworkAS13335 · Cloudflare, Inc.
Reverse IPviewdns.info → rapiddns.io →
Registration (base domain)invoice-ads-program.com · Oluşturuldu Apr 23, 2026 (100d)
Elapsed Since First Report 69 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Unverified.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
İlk Kez Tespit EdildiMay 01, 2026
Nameserversns.gransy.comns2.gransy.comns3.gransy.comns4.gransy.comns5.gransy.com
TLS Fingerprint2630d3b69b424e523c3268416bd2be1c76b1f4cf…
Case IDPD-20260501-F23EE9
Page Title
Accounts Centre
TLS Certificate
Valid transport encryption · Issued by Google Trust Services · valid for 89 days
Teknolojiler · 6 identified
Node.js
Programming languages

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

nodejs.org 100% confidence
React
JavaScript frameworks

React is an open-source JavaScript library for building user interfaces or UI components.

reactjs.org 100% confidence
Next.js
JavaScript frameworks Web frameworks

Next.js is a React framework for developing single page Javascript applications.

nextjs.org 100% confidence
Cloudflare
CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

www.cloudflare.com 100% confidence
Webpack
Miscellaneous

Webpack is an open-source JavaScript module bundler.

webpack.js.org 100% confidence
HTTP/3
Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

httpwg.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Bu Alan Adını Bildir Kanıt sunun ve başkalarını korumaya yardımcı olun

VirusTotal Analizi

19 / 91 security vendors flagged this domain
View on VT
ADMINUSLabs
alphaMountain.ai
BitDefender
Cluster25
CRDF
CyRadar
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Kaspersky
LevelBlue
Lionic
Mimecast
SOCRadar
Sophos
VIPRE
Webroot
Site Performans Analizi

Google PageSpeed Insights — mobile performance audit of program-system.invoice-ads-program.com · checked May 1, 2026

75
Needs Work
Performance
FCP
0.9s
First Contentful Paint
LCP
8.78s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
27ms
Total Blocking Time
SI
2.05s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Kanıtlar ve Dış Raporlar Open external tools
Güvenlik Analizi
URLScan Malicious VirusTotal 19 det. ChainPatrol URLQuery 2 det. Gridinsoft 0 trust SSL Labs Valid TLS CF Radar Malicious DNS Security 5/14 WOT ScamAdviser Kara Liste Kontrol Aracı URLVoid Sucuri SiteCheck MDN Gözlemevi
OSINT ve İstihbarat
Web-Check Full scan Shodan Censys ThreatFox Hudson Kayası IntelX crt.sh Certs WHOIS Wayback
DNS ve Ağ
nslookup.io DNS bgp.tools ASN/Route
SEO ve Alan Adı
SpyFu Moz DA/PA Ahrefs Backlinks Derinlemesine Analiz

Bu Siteden Etkilendiniz mi?

Yalnız değilsin ve utanacak hiçbir şey yok. Dolandırıcılar, güveni suistimal eden sofistike suçlulardır. Yaşadıklarınızı bildirmek, dolandırıcılığa karşı en etkili silahtır — yaptığınız bildirim, başkalarının mağdur olmasını önleyebilir ve kolluk kuvvetlerinin harekete geçmesine yardımcı olabilir. Sessizlik, dolandırıcıların en büyük avantajıdır. Kır şunu.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

FBI IC3
İnternet suçlarını bildirin (ABD)
Europol
Siber suçları bildirin (AB)
Action Fraud
Action Fraud
Dolandırıcılık ve siber suçları bildirin (Birleşik Krallık)
Alan Adı İtirazı
Yanlış pozitif bir sonuç çıkarsa bu kaydı itiraz edin
Kurtarma dolandırıcılarına dikkat edin! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →

Yerel Yetkililere Bildirin

Bilgi almak için ülkenizi seçin siber suçlarla ilgili resmi irtibat noktaları, or create a complaint draft →

Ülkenizi seçin...
180'den fazla ülke
Zero-PII — verileriniz tarayıcıdan asla dışarı çıkmaz Review and submit it yourself

Related Infrastructure

Stored relationships are grouped by the exact matching attribute. A shared provider or registrar alone does not prove common ownership.

Content matches 4

user6.invoice-partners-agency.com
user6.invoice-partners-agency.com
26 detections · Similar title
username8464.invoice-ads-program.com
username8464.invoice-ads-program.com
26 detections · Similar title
username8459.invoice-ads-program.com
username8459.invoice-ads-program.com
26 detections · Similar title
user40.invoice-partners-agency.com
user40.invoice-partners-agency.com
25 detections · Similar title

Shared IP 172.66.0.96 6

This IP hosts multiple phishing domains — infrastructure shared across campaigns

username8437.invoice-ads-program.com favicon username8437.invoice-ads-program.com 25/95 username8461.invoice-ads-program.com favicon username8461.invoice-ads-program.com 25/95 invoice-payment.invoice-ads-program.com favicon invoice-payment.invoice-ads-program.com 25/95 meta-code.invoice-ads-agency.com favicon meta-code.invoice-ads-agency.com 25/95 meta-active.invoice-ads-agency.com favicon meta-active.invoice-ads-agency.com 25/95 facebook-invoice.program-ads-agency.com favicon facebook-invoice.program-ads-agency.com 24/95

Same registrar: Gransy, s.r.o 6

user.financexaufx.com favicon user.financexaufx.com 1/95 rainbets-canada.com favicon rainbets-canada.com 6/95 sumupstudio.com favicon sumupstudio.com 3/95 valecapitalmarket.com favicon valecapitalmarket.com 6/95 mateladepormhub.phemayameltahub.site favicon mateladepormhub.phemayameltahub.site 18/95 bugadeltrack.com favicon bugadeltrack.com 10/95

Meta impersonation 8

These domains also target Meta users. View all Meta threats →

user15.invoice-partners-agency.com user15.invoice-partners-agency.com 25 username8834.invoice-ads-agency.com username8834.invoice-ads-agency.com 25 admin.invoice-ads-agency.com admin.invoice-ads-agency.com 24 application-system.accounts-admin-agency.com application-system.accounts-admin-agency.com 24 team.invoice-partners-agency.com team.invoice-partners-agency.com 24 username4068.invoice-ads-agency.com username4068.invoice-ads-agency.com 24 username5642.invoice-ads-agency.com username5642.invoice-ads-agency.com 24 identity-hub.credit-agency-meta.com identity-hub.credit-agency-meta.com 23

About This Report: program-system.invoice-ads-program.com

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “Accounts Centre”, which may be designed to impersonate Meta.

program-system.invoice-ads-program.com has been flagged by 19 security vendors as of August 1, 2026.

Bu ilanın yanlış olduğunu düşünüyorsanız, şunları yapabilirsiniz: itirazda bulunmak. Metodolojimiz hakkında daha fazla bilgi için lütfen şu sayfayı ziyaret edin: Sıkça Sorulan Sorular sayfası.

Herhangi Bir Alan Adını Kontrol Et

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Şimdi Tara

Oltalama Olayını Bildir

Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun

Report

Canlı Tehdit Akışı

Recent phishing reports and observed availability changes

Monitor

Gelişmelerden Haberdar Olun, Güvende Kalın

Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin

Canlı Tehdit Akışı Bu İlanı İtiraz Et
HTML · IFRAME

Bu Raporu Yerleştir

Bu tehdit bilgisini web sitenizde veya blogunuzda paylaşın

embed.html 
<iframe
  src="https://phishdestroy.io/tr/embed/domain/program-system.invoice-ads-program.com"
  title="PhishDestroy threat report for program-system.invoice-ads-program.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>