meta-orion-f47[.]pages[.]dev

This domain, meta-orion-f47.pages.dev, is identified as a high-risk phishing site designed to impersonate Meta security notifications. Analysis indicates the infrastructure was crafted to mimic legitimate Meta login or account verification portals, likely targeting users with fraudulent alerts about unauthorized access or policy violations. The intent appears to be the harvesting of login credentials, payment details, or personal information through deceptive forms or cloned interfaces. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on October 05, 2025, and resolves to the IP address 172.66.44.151, hosted under AS13335. The SSL certificate, issued by Google Trust Services (WE1), provides a veneer of legitimacy, though the domain is flagged by 17 out of 95 security vendors on VirusTotal. It appears on two security blocklists and has been proactively blocked by PhishDestroy and PhishingDB. The page title, 'Suspected phishing site | Cloudflare,' further confirms its malicious classification. Users who visited meta-orion-f47.pages.dev or interacted with its content should immediately revoke any entered credentials, particularly for Meta-associated accounts. It is recommended to scan local systems for potential malware or unauthorized access, as phishing sites may deploy additional payloads. Affected individuals should enable multi-factor authentication on all critical accounts and monitor for unauthorized transactions or communications. If financial data was submitted, contact relevant institutions to initiate fraud protection protocols.