meta-id2342[.]agency-manager-support[.]com

This domain is flagged as an elevated-risk credential phishing site specifically targeting Meta users. Analysis indicates the domain impersonates Meta’s Accounts Centre interface, a tactic commonly used to harvest login credentials through fraudulent login portals. The threat type is classified as brand impersonation with a focus on credential theft, posing significant risk to users who may unknowingly disclose sensitive account information. Infrastructure analysis reveals the domain meta-id2342.agency-manager-support.com was registered on May 07, 2026, through Gransy, s.r.o. It resolves to the IP address 162.159.140.98, located in Canada and associated with Cloudflare, Inc. The domain is currently offline but was previously detected by 22 out of 95 security vendors on VirusTotal. It appears on one security blocklist and was blocked by at least one threat intelligence feed. The SSL certificate is issued by Google Trust Services (WE1), a detail often exploited to lend false legitimacy to phishing sites. Mitigation steps for this specific threat include immediate blocking of the domain and its resolving IP (162.159.140.98) at the network perimeter. Organizations should deploy indicators of compromise (IOCs) to endpoint detection systems to prevent access attempts. User awareness training should emphasize verification of domain authenticity before entering credentials, particularly for Meta-related login pages. Security teams are advised to monitor for unusual authentication attempts from internal IPs that may indicate prior exposure to this phishing campaign. Given the domain’s recent creation date and association with a known registrar used in phishing operations, proactive monitoring of newly registered domains with similar naming patterns is recommended.