meta-id17639[.]program-ads-agency[.]com

The domain meta-id17639.program-ads-agency.com is currently active and classified as a Facebook credential phishing threat. Analysis of the page title, "Accounts Centre," indicates an attempt to impersonate Meta's authentication portal, targeting users' login credentials and session tokens. The domain remains operational and poses an elevated risk due to its convincing mimicry of legitimate Meta services. Infrastructure analysis reveals the domain was registered on April 17, 2026, through Gransy, s.r.o., and resolves to the IP address 172.66.0.96. It is flagged by 22 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on at least one security blocklist and is actively blocked by PhishDestroy. Technical indicators include the use of Node.js, React, Next.js, Cloudflare, Webpack, and HTTP/3, suggesting a modern, obfuscated phishing infrastructure designed to evade detection and enhance scalability. Current status confirms the domain remains active, and users are advised to treat any interaction with it as malicious. Organizations should immediately block the domain and its resolving IP (172.66.0.96) at the network perimeter. End-users should verify the legitimacy of any "Accounts Centre" login prompts by inspecting the URL for the authentic meta.com domain. Security teams are recommended to monitor for related subdomains or IPs associated with the registrar Gransy, s.r.o., as this infrastructure may be reused for future phishing campaigns.