meta-lattice-cvn[.]pages[.]dev

This domain, meta-lattice-cvn.pages.dev, poses a credential theft threat through brand impersonation of Meta for Business. Analysis of the page title, 'Meta for Business | Page Appeal,' indicates an attempt to deceive users into entering login credentials on a fraudulent portal designed to mimic legitimate Meta business authentication pages. The domain specifically targets business users who may be tricked into providing access to corporate Meta accounts, potentially leading to unauthorized access, data breaches, or further social engineering attacks against connected services. Evidence supporting this assessment includes detection by 16 out of 95 security vendors on VirusTotal, indicating a consensus among multiple threat intelligence sources. The domain was registered through Cloudflare, Inc. on September 27, 2025, and currently resolves to the IP address 172.66.44.145, hosted on Cloudflare's infrastructure (AS13335). Infrastructure analysis reveals the domain appears on two security blocklists, including PhishDestroy and PhishingDB. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as it is a standard certificate used across Cloudflare-hosted domains and does not validate the legitimacy of the content. Users who visited meta-lattice-cvn.pages.dev should immediately revoke any entered credentials and enable multi-factor authentication on their Meta accounts. If login details were submitted, reset passwords for all accounts where the same credentials may have been reused. Monitor Meta account activity for unauthorized access or changes, and report any suspicious behavior to the platform's security team. Organizations should update their security blocklists to include this domain and its associated IP address to prevent future access attempts. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts targeting Meta or other business platforms.