meta-shroud[.]pages[.]dev

The domain meta-shroud.pages.dev is identified as a high-risk brand impersonation threat specifically targeting Facebook, a platform operated by Meta. Analysis confirms the domain was designed to deceive users by mimicking official Meta properties, likely for credential theft or social engineering purposes. As of the latest assessment, the domain has been taken offline, though prior activity remains a concern for historical exposure. Technical indicators reveal the domain was flagged by 17 of 95 security vendors on VirusTotal, with additional detections by Google Safe Browsing as phishing. The domain was registered through Cloudflare, Inc. on February 21, 2026, and resolved to the IP address 172.66.45.34, hosted on Cloudflare's infrastructure (AS13335). The SSL certificate was issued by Google Trust Services under the identifier WE1. The page title, Meta for Business | Privacy Center, further reinforces the attempt to impersonate legitimate Meta business resources. The domain appears on at least one security blocklist and is actively blocked by enterprise-grade threat intelligence feeds. Current status indicates the domain is offline, reducing immediate risk to end users. However, organizations and security teams should treat this domain as a confirmed malicious indicator. Recommended actions include adding the domain and associated IP to internal blocklists, monitoring for related infrastructure (e.g., subdomains, newly registered lookalike domains), and alerting users to the specific impersonation tactic observed. Historical logs should be reviewed for any prior connections to this domain, and affected users should be instructed to reset credentials if exposure is suspected. Given the high-risk classification, proactive measures are advised to prevent recurrence or similar attacks.