meta-astra.pages.dev impersonates Meta – 7 security vendors flag

PhishDestroy classifies meta-astra.pages.dev as an active phishing domain that impersonates Meta services to steal your login credentials, personal data, or payment details. The threat arrives via social-engineering tactics such as fake login prompts or urgent notifications that mimic official Meta pages. Victims who enter information may have their accounts hijacked, their identity misused, or their financial information drained without realizing it immediately. This impersonation attack specifically targets users who believe they are interacting with a legitimate Meta service, exploiting trust in the brand to bypass normal caution. This domain was flagged by 7 of 95 VirusTotal security vendors and listed by Google Safe Browsing under SOCIAL_ENGINEERING, confirming its use in deception campaigns. It resolves to IP address 188.114.96.3 and is protected by a Google Trust Services SSL certificate, which helps the page appear legitimate at first glance. The site is registered through Cloudflare, Inc., a common choice among attackers for anonymity and fast DNS changes. The domain is hosted on Cloudflare Pages, a legitimate service that has been abused by threat actors to serve phishing content quickly and at scale. If you visited meta-astra.pages.dev, stop entering any information immediately and check your device for unusual activity. Log out of your browser, clear cached data, and run a full antivirus scan. If you entered Meta credentials, change your password at meta.com and enable two-factor authentication right away. Report any unauthorized transactions to your bank and consider freezing credit files if sensitive data was provided. Monitor email and SMS for follow-up phishing attempts. Forward any suspicious messages to Meta’s official abuse channels to help protect others.