Known malicious kithighphishing
Meta Verified 'rewards' phishing (safe-badge kit)
family: meta-verified-rewards
Facebook/Meta 'Meta Verified — rewards for you' credential-phishing campaign on disposable hosting (safe-badge-*/bluetick-* pages.dev tenants). A distinct kit from the Meta Page-Appeal campaign, luring users with a fake paid-verification reward. Anchored on the residential-capture lure title.
Anchors
SMQL queryrun
nodriver_title:"Meta Verified - rewards for you"Provenance
Added: 2026-07-04 21:51
Created 2026-07-04 from the verdict FP/FN audit brand-lure sweep. Sibling of hunt meta-page-appeal (#147). smql-tier = tracking only. | 2026-07-06: content anchor split out to sibling hunt row (utils.js exfil) — this row stays SMQL-title-only.
Sightings (25)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| safe-badge-start-page-00001hello.pages.dev | 99a74194… | — | query | 2026-07-21 13:00 |
| business-blue-tick-confirmed-000112026.pages.dev | 6fc0b519… | — | query | 2026-07-20 00:47 |
| business-blue-tick-confirmed-000312026.pages.dev | a8f454f2… | — | query | 2026-07-16 01:00 |
| business-blue-tick-confirmed-000332026.pages.dev | 463b970d… | — | query | 2026-07-15 14:00 |
| business-blue-tick-confirmed-000122026.pages.dev | 35fa0e6e… | — | query | 2026-07-14 14:00 |
| business-blue-tick-confirmed-000282026.pages.dev | 8b840e52… | — | query | 2026-07-14 01:00 |
| business-badge-help-page-vip-00002-4156.pages.dev | 86721b7d… | — | query | 2026-07-06 13:00 |
| safe-badge-start-page-00021hello.pages.dev | 1bb309eb… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00029hello.pages.dev | 3c335619… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00017hello.pages.dev | 68957049… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00007hello.pages.dev | f9b083d4… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00031hello.pages.dev | 8e6bf2f8… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00012hello.pages.dev | 9b588672… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00009hello.pages.dev | e9f9fcdd… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00024hello.pages.dev | 35d72e60… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00027hello.pages.dev | 897e8a59… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00001hello.pages.dev | 1be8f7a2… | — | query | 2026-07-04 21:51 |
| safe-badge-start-page-00040hello.pages.dev | c104e541… | — | query | 2026-07-04 21:51 |
| safe-badge-welcome-page-00034hello.pages.dev | 6a240189… | — | query | 2026-07-04 21:51 |
| safe-badge-welcome-page-00008guide.pages.dev | 927209ac… | — | query | 2026-07-04 21:51 |
| safe-badge-welcome-page-00002guide.pages.dev | 63e89344… | — | query | 2026-07-04 21:51 |
| safe-badge-info-page-00012hello.pages.dev | 47076d49… | — | query | 2026-07-04 21:51 |
| safe-badge-support-page-00028world.pages.dev | 7b5d8e51… | — | query | 2026-07-04 21:51 |
| safe-badge-welcome-page-00003guide.pages.dev | 8386cb69… | — | query | 2026-07-04 21:51 |
| safe-badge-support-page-00026world.pages.dev | fa8b6866… | — | query | 2026-07-04 21:51 |