verify-badge-vip9[.]pages[.]dev

This domain, verify-badge-vip9.pages.dev, operates as a credential theft platform targeting users through Meta brand impersonation. The site presents itself as a "Meta Verified - Rewards for you" portal, designed to harvest login credentials by falsely offering verification rewards. Analysis indicates the infrastructure was constructed to exploit trust in Meta’s verification program, a tactic commonly used to gain unauthorized access to social media accounts and linked services. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered through Cloudflare, Inc. on June 12, 2026, with an SSL certificate issued by Google Trust Services. It resolves to the IP address 172.66.44.155 and employs technologies including HSTS, Cloudflare, and HTTP/3. Security vendors have flagged the domain at a rate of 13/95 on VirusTotal, while Gridinsoft assigned it a trust score of 0/100. The domain appears on one security blocklist and was previously blocked by PhishDestroy, further confirming its malicious classification. Users who visited verify-badge-vip9.pages.dev should immediately revoke any entered credentials, particularly for Meta or associated accounts. It is recommended to scan the device for malware, as credential theft sites often deploy additional payloads. Enable multi-factor authentication on all accounts and monitor for unauthorized access. Given the domain’s offline status, users should remain vigilant for similar impersonation attempts, as threat actors frequently rotate infrastructure to evade detection.