meta-id99997[.]agency-manager-support[.]com

This domain, meta-id99997.agency-manager-support.com, is flagged as part of a credential phishing campaign targeting users of social media platforms. Analysis of the page title, 'Accounts Centre,' indicates an attempt to mimic legitimate account management portals, likely designed to harvest login credentials. The domain does not currently exhibit overt signs of a drainer kit but employs deceptive branding consistent with platform impersonation tactics. No direct association with known malware families or cryptocurrency drainers has been confirmed at this stage, though further behavioral analysis is warranted. Infrastructure analysis reveals the domain was registered on May 07, 2026, through Gransy, s.r.o., a registrar frequently observed in phishing operations. It resolves to the IP address 172.66.0.96, geolocated to Canada and associated with a content delivery network. The domain is secured with an SSL certificate issued by Google Trust Services (WE1), a common tactic to lend legitimacy to malicious sites. As of the latest scan, 19 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The domain appears on one security blocklist, and no entries were found in the Google Safe Browsing database at the time of analysis. The domain remains active and poses an elevated risk to end users, particularly those redirected via social engineering or malvertising vectors. Response actions include submission to threat intelligence feeds and coordination with hosting providers for takedown. Despite these measures, the domain continues to resolve, and the SSL certificate remains valid, allowing the campaign to persist. Users are advised to verify the authenticity of account management portals by cross-referencing official domain lists and employing multi-factor authentication to mitigate credential theft risks. Organizations should update detection rules to include this domain and its associated IP in perimeter defenses.