sp0ct-jorlen-biz-delqax-welmor[.]pages[.]dev

This domain is flagged as a high-risk Facebook Business credential phishing site. Analysis indicates the infrastructure is actively harvesting login credentials by impersonating Meta for Business authentication portals, a tactic commonly used to compromise corporate social media accounts and distribute further phishing campaigns. Infrastructure analysis reveals the domain sp0ct-jorlen-biz-delqax-welmor.pages.dev is registered through Cloudflare, Inc. and resolves to IP address 172.66.46.230. The page title, 'Meta for Business | Page Appeal,' directly mimics legitimate Meta business services. Security vendors on VirusTotal flag the domain as malicious, with 8 out of 95 detections confirming phishing activity. The SSL certificate is issued by Google Trust Services, providing a false sense of security to potential victims. No creation date is available, but the domain remains active and unblocked by most endpoint protections. Mitigation requires immediate action from network administrators and end-users. Organizations should block the domain and IP at the firewall or DNS level to prevent access. Security teams must monitor for credential reuse attempts, particularly for Meta Business Suite logins. End-users should be trained to verify URLs before entering credentials, especially those requesting Facebook or Meta business account access. Multi-factor authentication should be enforced on all business social media accounts to reduce the impact of stolen credentials.