meta-nova[.]pages[.]dev

PhishDestroy identifies meta-nova.pages.dev as an active phishing domain impersonating Meta (Facebook/Instagram) login portals to harvest credentials and session tokens. This fraudulent site leverages Google Trust Services SSL certificates (issued to Google Trust Services LLC) and resolves to IP 188.114.96.3 through Cloudflare, Inc., masking its true infrastructure. Google Safe Browsing has flagged this domain under 'SOCIAL_ENGINEERING,' indicating deceptive content designed to trick users into divulging sensitive information. The domain is hosted on Google Pages (pages.dev), a legitimate service often abused for credential theft campaigns due to its free hosting and rapid deployment capabilities. This domain poses an elevated threat due to its use of social engineering tactics targeting Meta platform users, specifically those expecting secure account management interfaces. Evidence supporting its malicious classification includes VirusTotal detections from 9 of 95 security vendors, alongside Cloudflare’s role as both registrar and hosting provider, complicating takedown efforts. Google Safe Browsing’s classification further validates its use in phishing operations, with the domain likely recently registered to evade historical blocklists. The combination of trusted SSL infrastructure and deceptive domain naming (e.g., 'meta-nova') enhances its credibility, increasing the likelihood of successful credential harvesting. If users have visited meta-nova.pages.dev or entered credentials, they should immediately revoke active Meta sessions, change passwords, and enable two-factor authentication. Scan devices for malware using reputable antivirus tools, as phishing pages may deploy additional payloads. Report the domain to Meta’s phishing portal (phish@fb.com) and Google Safe Browsing to aid in blocking efforts. Avoid interacting with similar domains offering 'Meta account recovery' or 'security alerts' via unsolicited links.