meta-atlas[.]pages[.]dev

This domain, meta-atlas.pages.dev, is identified as a credential theft operation impersonating Meta for Business services. Analysis of the page title, 'Meta for Business | Page Appeal,' confirms the targeting of business account credentials through fraudulent Meta branding. No direct evidence of a crypto drainer kit was observed, but the infrastructure aligns with credential harvesting campaigns designed to compromise corporate social media and advertising accounts. Infrastructure analysis reveals the domain was registered on September 23, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.47.199, hosted on Cloudflare's network (AS13335). Security vendor detections on VirusTotal indicate 19 out of 95 engines flagged the domain as malicious. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and is explicitly labeled as phishing by Google Safe Browsing. The SSL certificate, issued by Google Trust Services (WE1), provides encrypted connections but does not mitigate the underlying threat. The domain is currently offline, reducing immediate exposure risk. However, residual threats persist due to potential reuse of collected credentials or reactivation of the infrastructure. Organizations are advised to monitor for unauthorized access attempts targeting Meta Business accounts and enforce multi-factor authentication. Network administrators should ensure blocklisting of the domain and associated IP address to prevent accidental access. Continuous monitoring of related infrastructure is recommended, as threat actors frequently repurpose domains for subsequent campaigns.