account-verification-1wy[.]pages[.]dev

The domain account-verification-1wy.pages.dev is confirmed as a credential phishing site targeting Meta (formerly Facebook) users. Analysis indicates the page masquerades as a legitimate Meta Verified rewards portal, specifically designed to harvest user credentials through deceptive login prompts. The domain is currently offline but was actively used in phishing campaigns prior to takedown. Technical indicators reveal the domain was registered on June 10, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.47.7. Security vendor analysis shows 15 of 95 VirusTotal engines flagged the domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy. Gridinsoft assigns a trust score of 0/100, further confirming its malicious nature. The page title, 'Meta Verified - Rewards for you,' aligns with known phishing templates used to exploit user trust in brand-affiliated reward programs. Infrastructure analysis reveals the domain was hosted on Cloudflare Pages, a platform frequently abused for phishing due to its free hosting and SSL capabilities. While currently offline, similar domains may resurface under different subdomains or TLDs. Organizations and users are advised to block the domain and IP 172.66.47.7 at the network level. Security teams should monitor for related indicators, including the SSL issuer (Google Trust Services) and registrar (Cloudflare, Inc.), as threat actors often reuse infrastructure. End users should verify all Meta-related communications through official channels and avoid entering credentials on unsolicited reward or verification pages.