user-account[.]accounts-admin-agency[.]com

The domain user-account.accounts-admin-agency.com has been identified as a credential phishing site designed to harvest user account credentials. Analysis indicates the site impersonates legitimate account management portals, likely targeting users of major online services or financial platforms. The domain is currently offline, but prior activity confirms its malicious intent. Infrastructure analysis reveals this domain was flagged by 20 of 95 security vendors on VirusTotal, indicating widespread detection. The domain was registered through Gransy, s.r.o. on May 01, 2026, an unusually future-dated creation that suggests fraudulent activity. It resolves to the IP address 162.159.140.98 and appears on two security blocklists, including PhishDestroy and PhishingArmy. Additional technical indicators include a Gridinsoft trust score of 0/100, further confirming its malicious nature. The page title 'Accounts Centre' aligns with common phishing tactics to mimic legitimate account management interfaces. Current status shows the domain has been taken offline, reducing immediate risk to users. However, the infrastructure remains a potential threat if reactivated. Organizations and individuals are advised to block the domain and associated IP address at the network level. Users who may have interacted with this site should immediately reset credentials for any accounts accessed during the exposure period. Security teams should monitor for similar domains registered through the same registrar or resolving to the same IP range, as these may indicate related phishing campaigns.