help-verify-71326498[.]pages[.]dev

This domain is flagged for hosting a credential theft campaign under the guise of Meta Verified rewards. Analysis indicates the threat type is brand impersonation, specifically targeting users with fraudulent login prompts to harvest account credentials. The risk level is classified as elevated due to the domain’s association with a recognized social media brand and its active exploitation in phishing operations. Infrastructure analysis reveals the domain resolves to the IP address 172.66.47.10 and was registered through Cloudflare, Inc. on June 10, 2026. The SSL certificate is issued by Google Trust Services, a common tactic to lend legitimacy to malicious sites. Detection metrics show the domain appears on one security blocklist and is flagged by 14 out of 95 security vendors on VirusTotal. Additionally, the Gridinsoft trust score for this domain is 0/100, further corroborating its malicious nature. The page title, 'Meta Verified - Rewards for you,' aligns with known Meta brand impersonation schemes designed to deceive users into disclosing sensitive information. To mitigate risks associated with this credential theft campaign, users are advised to verify the authenticity of any communication claiming to originate from Meta by directly accessing official channels. Organizations should implement domain-based blocking for help-verify-71326498.pages.dev and monitor for similar patterns, such as newly registered domains leveraging Cloudflare infrastructure. Multi-factor authentication (MFA) should be enforced to reduce the impact of credential compromise. Network-level protections, including DNS filtering and endpoint detection, are recommended to prevent access to known malicious domains and IPs associated with this campaign.