business-for-results[.]pages[.]dev

This domain, business-for-results.pages.dev, poses a credential harvesting threat targeting users of Meta Business services. The site presents a fraudulent login interface mimicking legitimate Meta Business authentication pages, designed to capture usernames, passwords, and potentially multi-factor authentication codes. Analysis of the page title, 'Meta for Business | Page Appeal,' confirms the targeted impersonation of official Meta branding, a common tactic in business email compromise and social engineering campaigns. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on September 24, 2025, through Cloudflare, Inc., and resolves to IP address 172.66.47.64 within Cloudflare's US-based AS13335 network. Security vendors have flagged the domain as malicious, with 22 out of 95 engines on VirusTotal detecting it as phishing infrastructure. Additionally, the domain appears on two security blocklists: PhishDestroy and PhishingDB. The SSL certificate, issued by Google Trust Services (WE1), provides encryption but does not validate legitimacy, as phishing sites commonly use valid certificates to appear trustworthy. Users who visited business-for-results.pages.dev should take immediate action to mitigate potential account compromise. First, reset passwords for any accounts accessed through the site, prioritizing Meta Business and associated email accounts. Enable multi-factor authentication if not already active, using app-based or hardware tokens rather than SMS-based methods. Monitor linked accounts for unauthorized activity, including login attempts, message sends, or financial transactions. If credentials were entered, assume they are compromised and avoid reusing them across other services. Report the incident to internal security teams or the legitimate service provider to aid in broader threat mitigation efforts.