meta-query-9el[.]pages[.]dev

This domain, meta-query-9el.pages.dev, is identified as a brand impersonation threat specifically targeting Facebook. The page title, 'Meta for Business | Page Appeal,' aligns with common tactics used to deceive users into believing they are interacting with legitimate Meta or Facebook business services. Analysis indicates no direct evidence of a crypto drainer or credential-harvesting kit on the domain at the time of assessment, but the impersonation of a major social media platform suggests intent to collect login credentials or propagate further malicious activity under false pretenses. Technical indicators confirm elevated risk. The domain was registered on February 21, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. VirusTotal detection shows 19 out of 95 security vendors flagging the domain as malicious. The domain appears on two security blocklists and is associated with an SSL certificate issued by Cloudflare TLS Issuing ECC CA 3. No Google Safe Browsing (GSB) flags were recorded at the time of analysis, but the combination of vendor detections and blocklist presence underscores its malicious classification. The domain is currently offline, likely due to takedown actions or suspension by the hosting provider. While the immediate threat is mitigated, residual risk remains for users who may have interacted with the domain prior to its deactivation. Organizations and individuals are advised to monitor for unauthorized access attempts linked to Facebook or Meta credentials, particularly if login details were entered on the site. Network-level blocking of the domain and its resolving IP is recommended for proactive defense. Continuous vigilance is necessary, as threat actors frequently re-deploy similar infrastructure under new domains.