meta-guardx[.]pages[.]dev

The domain meta-guardx.pages.dev is assessed as elevated-risk generic phishing infrastructure, previously hosting content flagged as a suspected phishing page impersonating a Cloudflare security warning interface. The threat type is generic phishing, indicating likely credential capture or deceptive redirect behavior rather than a branded high-target clone.

Technical telemetry shows VirusTotal detection at 19/95 security vendors, with the domain created on September 24, 2025. It is registered through Cloudflare, Inc. and resolves to IP 172.66.46.224 under AS13335 Cloudflare, Inc., located in the US. The page was associated with SSL issued by Google Trust Services / WE1. The domain appears on 2 security blocklists and is currently marked as offline. The page title recorded was 'Suspected phishing site | Cloudflare'.

The current offline status reduces active exposure, but historical infrastructure indicators confirm malicious intent. Mitigation should include maintaining DNS-level blocking and monitoring Cloudflare Pages subdomain patterns for reuse in phishing campaigns. Security teams should correlate the 19/95 VT detections with other Cloudflare-hosted abuse clusters and ensure detection rules cover similar subdomain structures. Continued surveillance is recommended due to the rapid redeployment capability of pages.dev infrastructure in phishing operations, even after takedown.