signup-member[.]credit-agency-meta[.]com

This domain, signup-member.credit-agency-meta.com, is flagged as an active credential theft phishing operation. Analysis indicates it impersonates Meta's Accounts Centre, a common tactic to harvest login credentials by mimicking legitimate account management portals. The page title 'Accounts Centre' aligns with Meta's branding, suggesting a targeted effort to deceive users into entering sensitive authentication details. No evidence of a crypto drainer kit was observed, but the domain's infrastructure and naming convention strongly imply credential harvesting as the primary objective. Infrastructure analysis reveals the following technical indicators: VirusTotal detection score of 23/95 security vendors, registration via Gransy, s.r.o., and resolution to IP address 172.67.192.39, hosted on Cloudflare infrastructure in Canada. The domain was created on April 28, 2026, indicating a recently established threat. It appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), a common practice among phishing domains to appear legitimate. Google Safe Browsing (GSB) status is not explicitly provided, but the VirusTotal score and blocklist presence confirm malicious intent. The domain remains active, posing an elevated risk to users. Response actions should include immediate blocking of the domain and IP at the network level, along with monitoring for related subdomains or similar naming patterns. Users are advised to verify the authenticity of any 'Accounts Centre' login prompts by cross-referencing the URL with official Meta domains. Organizations should update detection rules to include this domain and its associated indicators, while end-users should enable multi-factor authentication (MFA) to mitigate credential theft risks. The remaining risk is classified as elevated due to the domain's active status and established detection by multiple security vendors.