meta-id19239210[.]invoice-ads-setting[.]com
“Accounts Centre”
meta-id19239210.invoice-ads-setting.com — 内容不可用. 品牌冒充:Facebook. 证据摘要: VirusTotal 24/91 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, Chong Lua Dao); URLQuery 6 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100. 注册商: Gransy, s.r.o.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, meta-id19239210.invoice-ads-setting.com, is actively engaged in brand impersonation targeting Meta's Accounts Centre login portal. Analysis indicates the threat type is a generic phishing scheme designed to harvest user credentials under the guise of a legitimate Meta service. The domain remains active as of this report, with no indications of takedown or mitigation efforts. Infrastructure analysis reveals the domain was registered through Gransy, s.r.o. on May 03, 2026, an anomalous future date suggesting potential obfuscation or misconfiguration. It resolves to the IP address 162.159.140.98, hosted by Cloudflare, Inc. in Canada, and presents an SSL certificate issued by Google Trust Services (WE1). The domain is flagged by 18 of 95 security vendors on VirusTotal and appears on one additional security blocklist. The page title, 'Accounts Centre,' directly mimics Meta's branding, reinforcing the phishing intent. The risk level is classified as elevated due to the domain's active status, direct impersonation of a high-value target, and moderate detection rates. Organizations and users are advised to block the domain and its associated IP at the network perimeter. Security teams should monitor for credential submission attempts originating from this domain and conduct internal audits for compromised accounts. End-users should be educated to verify domain authenticity before entering credentials, particularly for services like Meta where phishing attempts are prevalent.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | meta-id19239210.invoice-ads-setting.com |
malicious | Sinkholed |
| OpenDNS | meta-id19239210.invoice-ads-setting.com |
phishing | Phishing Block |
| Cloudflare DNS | meta-id19239210.invoice-ads-setting.com |
malicious | Sinkholed |
| Quad9 DNS | meta-id19239210.invoice-ads-setting.com |
malicious | Sinkholed |
| DNS4EU | meta-id19239210.invoice-ads-setting.com |
malicious | Sinkholed |
| Hagezi Threat Feed | meta-id19239210.invoice-ads-setting.com |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: invoice-ads-setting.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain invoice-ads-setting.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 6 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 置信度 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 置信度 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of meta-id19239210.invoice-ads-setting.com · checked May 15, 2026
证据与外部报告
PD-20260515-50DBB0 Recipient: abuse@regtons.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。