onboarding[.]credit-agency-meta[.]com

This domain, onboarding.credit-agency-meta.com, is actively hosting a fake login portal designed to impersonate Meta’s Accounts Centre. Analysis indicates the threat type is brand impersonation targeting Meta users, with the intent to harvest credentials. The domain remains active as of this report, posing an elevated risk to individuals accessing the fraudulent page. Infrastructure analysis reveals the domain was registered on April 26, 2026, through Gransy, s.r.o., and currently resolves to the IP address 104.21.73.207, hosted by Cloudflare, Inc. in Canada. The SSL certificate is issued by Google Trust Services (WE1). Security vendors on VirusTotal have flagged this domain, with 21 out of 95 detecting it as malicious. Additionally, the domain appears on one security blocklist, further confirming its association with phishing activity. The page title, Accounts Centre, directly mimics Meta’s legitimate interface, increasing the likelihood of successful deception. The current status of this domain is active, and users are advised to exercise caution. Organizations should immediately block the domain and its associated IP (104.21.73.207) at the network perimeter. Individuals who may have interacted with the site should reset their credentials using multi-factor authentication and monitor accounts for unauthorized activity. Security teams are recommended to review logs for connections to the domain or IP and investigate potential credential exposure.