Análisis de phishing y seguridad de meta-rooted.pages.dev

This domain, meta-rooted.pages.dev, is confirmed as a high-risk phishing resource specifically designed to impersonate Meta for Business login portals. Analysis indicates the page title 'Meta for Business | Page Appeal' was used to deceive targets into submitting corporate credentials, with the campaign currently classified as generic phishing. The domain remains inactive following takedown procedures, though prior activity suggests credential harvesting as the primary objective. Infrastructure analysis reveals the domain was registered on September 20, 2025, through Cloudflare, Inc., resolving to the IP address 172.66.44.90 (AS13335, United States). Detection metrics show 20 of 95 security vendors flagged the domain on VirusTotal, while two independent blocklists (PhishDestroy and PhishingDB) had previously listed it. The SSL certificate, issued by Google Trust Services (WE1), follows standard Cloudflare deployment patterns, though this provides no legitimacy to the fraudulent content. Creation date and hosting patterns align with short-lived phishing campaigns observed in recent months. Current status indicates the domain has been taken offline, though residual risk persists for organizations that may have cached or archived the malicious page. Security teams are advised to review authentication logs for access attempts to meta-rooted.pages.dev between September 20 and takedown, particularly from corporate networks. All credentials potentially exposed through this domain should be considered compromised and rotated immediately. Network-level blocking of the IP 172.66.44.90 is recommended as a precautionary measure, despite the current inactive state.