meta-credential[.]invoice-ads-agency[.]com

PhishDestroy has identified a phishing domain with an elevated risk level, specifically targeting Meta (Facebook) account credentials. The domain meta-credential.invoice-ads-agency.com mimics the legitimate Accounts Centre page to trick users into entering their login details. This threat is active and poses a significant risk to anyone who encounters it.

Technical analysis reveals several red flags. The domain was created on May 04, 2026, which is relatively recent, and is registered through Gransy, s.r.o., a registrar often associated with malicious domains. It resolves to IP address 162.159.140.98. VirusTotal flags this domain with 22 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (E8), which is commonly abused by phishers. The page title is "Accounts Centre," a clear attempt to impersonate Meta's official account management page.

To protect against this threat, users should never enter their Facebook credentials on this domain. Always verify the URL before logging in; legitimate Facebook login pages use facebook.com or a subdomain thereof. Enable two-factor authentication on your accounts to add an extra layer of security. If you have already entered credentials on this site, change your password immediately and report the incident to Meta's security team. PhishDestroy recommends blocking this domain at the network level and adding it to your blocklist.