businees-verify-badge-vip-12363456[.]pages[.]dev

This domain is a credential theft operation impersonating Meta's verification system. It presents users with a fraudulent "Meta Verified - Rewards for you" page designed to harvest login credentials, likely through a fake verification workflow. The site mimics legitimate Meta branding to deceive users into entering sensitive account information, which could lead to account takeover or further targeted attacks using stolen credentials. Analysis indicates the domain was registered on June 16, 2026, through Cloudflare, Inc., and is hosted on 172.66.44.123. It is flagged by 14 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain employs HSTS, Cloudflare infrastructure, and HTTP/3, which are common in both legitimate and malicious sites but provide no inherent trust. The SSL certificate is issued by Google Trust Services, adding a superficial layer of legitimacy while the domain remains offline following detection. Users who visited this domain should immediately reset their Meta account passwords using a secure device and enable multi-factor authentication if not already active. Check account activity for unauthorized logins or changes, and revoke access to any suspicious third-party applications linked to the account. Monitor financial or connected services for signs of compromise, as stolen credentials may be used in follow-up attacks. Report the incident to the platform's security team and consider notifying relevant data protection authorities if personal data was exposed.