meta-plorin[.]pages[.]dev

The domain meta-plorin.pages.dev is identified as a brand impersonation phishing site targeting Meta (formerly Facebook) credentials. Analysis indicates the site operates as a fake login portal designed to harvest user authentication details. As of the latest assessment, the domain has been taken offline, though prior activity suggests an active campaign to deceive users into disclosing sensitive account information. Technical indicators confirm the domain was registered through Cloudflare, Inc. on November 7, 2025, and resolves to the IP address 172.66.44.61. Detection metrics reveal the domain is flagged by 20 of 95 security vendors on VirusTotal, while also appearing on two independent security blocklists. The SSL certificate is issued by Google Trust Services (WE1), a common characteristic observed in both legitimate and malicious infrastructure. The page title, 'Suspected phishing site | Cloudflare,' further corroborates its classification as a high-confidence phishing resource. Current status indicates the domain has been rendered inaccessible, likely due to enforcement actions or infrastructure takedown. However, the underlying threat remains relevant due to the potential for rapid redeployment under new domains. Users are advised to verify the authenticity of any Meta login portal by inspecting the URL for official branding and HTTPS indicators. Organizations should update blocklists to include the domain and its associated IP address, while monitoring for similar patterns in newly registered domains using the same registrar or hosting provider. Individuals who may have interacted with the site should immediately reset their credentials and enable multi-factor authentication on all linked accounts.