meta-id17629[.]program-ads-agency[.]com

This domain, meta-id17629.program-ads-agency.com, operates as a fraudulent Meta Accounts Centre phishing site designed to harvest user credentials. Analysis indicates the page mimics Meta's authentication interface, likely targeting social media account takeovers through deceptive login prompts. The threat actor employs brand impersonation tactics, specifically replicating Meta's branding and interface elements to trick victims into entering sensitive account details. Infrastructure analysis reveals the domain was registered on April 17, 2026, through Gransy, s.r.o., an uncommon registrar for legitimate Meta services. The site resolves to 162.159.140.98, a Cloudflare IP address in Canada, and presents a Google Trust Services SSL certificate (WE1). Security vendors on VirusTotal detect the domain at 19/95, while it appears on one additional security blocklist. The page title explicitly states 'Accounts Centre,' a direct reference to Meta's authentication portal, further confirming its fraudulent intent. Users who visited this domain should immediately revoke any entered credentials through Meta's official account recovery options. All potentially exposed passwords must be changed, and multi-factor authentication should be enabled on the affected account. System scans for malware are recommended, as phishing pages may deploy additional payloads. Network administrators should block the domain and its resolving IP (162.159.140.98) at the perimeter level to prevent further access attempts. Monitoring for unusual login activity on associated accounts is critical, particularly for services linked to the compromised credentials.