dlavor-bintel-5d04be-trkt-crendal[.]pages[.]dev

This domain, dlavor-bintel-5d04be-trkt-crendal.pages.dev, is actively engaged in a targeted phishing campaign impersonating Facebook Business services. Analysis indicates the threat type as credential harvesting through brand impersonation, specifically mimicking Meta for Business login portals. The domain remains operational and poses a high risk to users who may unknowingly disclose sensitive account credentials, payment details, or administrative access. Infrastructure analysis reveals the domain is hosted on Cloudflare infrastructure, resolving to the IP address 188.114.97.3. It is registered through Cloudflare, Inc., and currently holds a detection score of 5 out of 95 security vendors on VirusTotal, signaling confirmed malicious activity. The SSL certificate is issued by Google Trust Services, which, while providing encryption, does not mitigate the fraudulent intent of the site. The page title, Meta for Business | Page Appeal, directly references the legitimate Meta brand, further corroborating the impersonation strategy. The domain remains active as of this assessment, with no evidence of takedown or mitigation. Organizations and users are advised to block the domain at the network level and add the IP address 188.114.97.3 to internal deny lists. Endpoint protection systems should be updated to include this domain in phishing and brand impersonation detection rules. Security teams are recommended to monitor for credential exposure tied to this campaign and initiate password resets for any affected accounts. Awareness training should emphasize the risks of interacting with unverified business login portals, particularly those hosted on third-party platforms.