kraxil-jomber-4e91ac-kthn-dravik[.]pages[.]dev

This domain, kraxil-jomber-4e91ac-kthn-dravik.pages.dev, is flagged as a high-risk phishing site impersonating Meta for Business services. Analysis indicates the page title 'Meta for Business | Page Appeal' is designed to deceive users into believing they are interacting with legitimate Meta business tools, likely targeting business account credentials, payment details, or advertising credentials. The infrastructure appears to lack association with known drainer kits but exhibits strong indicators of credential harvesting and potential follow-on financial fraud. Infrastructure analysis reveals critical technical indicators: the domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services, providing a false sense of security. VirusTotal detection shows 9 out of 95 security vendors flagging the domain as malicious, with specific classifications including phishing, fraud, and credential theft. No creation date is publicly available, but passive DNS records suggest recent activation. Google Safe Browsing status is currently marked as deceptive, and the domain appears on multiple blocklists with a high confidence score. The site remains active as of the latest verification, posing an ongoing threat to users. Immediate response actions include browser-based blocking, network-level filtering, and endpoint protection updates to prevent access. Despite these measures, the remaining risk is elevated due to the domain's operational status and the targeted nature of the phishing campaign. Users are advised to avoid interaction, verify URLs through official channels, and report any suspicious activity to their security teams. Organizations should monitor for credential reuse and implement multi-factor authentication to mitigate potential account takeovers.