meta-id19239240[.]invoice-ads-program[.]com

PhishDestroy identifies meta-id19239240.invoice-ads-program.com as an active brand impersonation phishing domain designed to deceive users into surrendering cryptocurrency by masquerading as the official Meta Ads Program interface. The domain leverages a fraudulent invoice-ads-program subdomain structure to exploit trust in Meta’s advertising platform, redirecting victims to a counterfeit payment portal that drains connected wallets. Security telemetry confirms the page is operational and actively harvesting credentials or crypto assets under the guise of legitimate Meta advertisement billing. Technical indicators reveal this domain resolves to 162.159.140.98 and holds a valid SSL certificate issued by Google Trust Services, increasing its credibility to unsuspecting users. VirusTotal analysis shows 24 out of 95 security vendors flag this domain as malicious, indicating moderate but significant detection coverage. Registered through Gransy, s.r.o. on April 23, 2026, the domain has already been listed on one public blocklist, including OISD’s block feed. Despite its recent creation, the infrastructure is configured to evade basic detection, combining a legitimate-looking SSL certificate with a deceptive naming scheme that closely mirrors Meta’s official domain structure. Users who visited this domain should immediately disconnect any connected cryptocurrency wallets and revoke any Meta Ads permissions granted through suspicious links. Check browser history and extension permissions for unauthorized access. Report the domain to your security team or platform provider and run a full antivirus scan. If financial loss occurred, file a report with local cybercrime units and your wallet provider. Avoid interacting further with this domain or any related subdomains.