meta-hyrix[.]pages[.]dev

This domain, meta-hyrix.pages.dev, operates as a credential harvesting infrastructure designed to impersonate Meta account verification portals. Analysis indicates the site presents fraudulent login interfaces to capture user credentials, likely targeting social media or financial access tied to Meta services. The threat category is classified as generic phishing with credential theft as the primary objective, potentially leading to account takeovers or secondary fraud schemes. Infrastructure analysis reveals multiple technical indicators supporting this classification. The domain was registered on November 12, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.47.56, hosted on AS13335. Security vendors on VirusTotal flagged the domain at a ratio of 17/95, while two independent blocklists—PhishDestroy and PhishingDB—have actively listed it. The SSL certificate, issued by Google Trust Services (WE1), aligns with common phishing patterns observed in Cloudflare-hosted malicious domains. Users who visited meta-hyrix.pages.dev should immediately revoke any entered credentials from their Meta accounts and enable multi-factor authentication. Device scans for malware are recommended, particularly if files were downloaded or browser extensions were installed. Network-level blocking of the domain and its resolving IP (172.66.47.56) should be implemented as a precautionary measure. Monitoring for unauthorized access attempts or unusual account activity is advised for at least 30 days following exposure.