meta-techic[.]accounts-admin-agency[.]com

This domain, meta-techic.accounts-admin-agency.com, is actively engaged in credential phishing operations targeting Meta (formerly Facebook) account holders. Analysis of the page title, "Accounts Centre," and the domain structure indicates an attempt to impersonate Meta’s authentication portals, likely to harvest login credentials, session tokens, or multifactor authentication codes. The domain does not exhibit characteristics of a crypto drainer or advanced post-compromise tooling, focusing instead on direct credential theft through cloned login interfaces. Infrastructure analysis reveals the domain was registered on May 18, 2026, through Gransy, s.r.o., a registrar frequently associated with high-risk domain registrations. It resolves to the IP address 162.159.140.98, hosted behind Cloudflare infrastructure in Canada, which is commonly exploited to obfuscate origin servers and evade takedowns. The SSL certificate is issued by Google Trust Services (WE1), providing a superficial layer of legitimacy. VirusTotal reports 21 out of 95 security vendors flagging the domain as malicious, while it appears on at least one security blocklist. The domain remains unlisted in Google Safe Browsing databases at the time of analysis. As of the latest verification, meta-techic.accounts-admin-agency.com remains active and continues to resolve. The domain’s use of Cloudflare and a recent registration date suggests an ongoing campaign with potential for rapid redeployment if disrupted. Users are advised to treat any interaction with this domain as hostile and to verify authentication requests through official Meta channels only. Organizations should update blocklists to include this domain and its associated IP, while monitoring for related infrastructure leveraging the same registrar or hosting patterns. The risk level remains high due to the domain’s active status and its direct targeting of sensitive authentication credentials.