verified-support-team12423655c412[.]pages[.]dev

This domain is flagged for hosting a credential phishing operation targeting users of Meta Verified services. Analysis indicates the infrastructure was designed to deceive victims into believing they were accessing legitimate reward offers, a common tactic in account takeover schemes. The domain, verified-support-team12423655c412.pages.dev, presents an elevated risk due to its targeted impersonation of a high-profile social media verification program and its recent creation date, which aligns with typical phishing campaign timelines. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on June 10, 2026, and resolves to the IP address 172.66.44.139. It is currently blocked by one security blocklist and flagged by 13 out of 95 security vendors on VirusTotal. The site employed HSTS and HTTP/3 protocols, alongside a Google Trust Services SSL certificate, likely to enhance its appearance of legitimacy. Despite these technical measures, the domain was taken offline following detection, though its infrastructure remains a potential vector for future malicious activity. Organizations and users should implement strict validation protocols for any communications claiming to originate from Meta Verified or similar reward programs. Security teams are advised to block the domain and its resolving IP (172.66.44.139) at the network perimeter, and monitor for any re-registration attempts under similar naming conventions. End-users should be trained to recognize phishing indicators, such as unsolicited reward offers, and instructed to verify the authenticity of such communications through official channels only. Given the domain's use of Cloudflare infrastructure, additional scrutiny of similarly structured subdomains under the pages.dev namespace is recommended.