meta-senlok-morvix-darnath[.]pages[.]dev

The domain meta-senlok-morvix-darnath.pages.dev was observed serving a credential phishing page titled “Meta for Business | Page Appeal”. VirusTotal records indicate that 13 out of 95 security engines flagged the host, showing a moderate detection consensus. HTTP requests return a 403 status, suggesting the content is presently inaccessible, and the site has been taken offline according to the latest intelligence. The domain resolves to the IP address 188.114.97.3, which belongs to AS13335 operated by Cloudflare, Inc., and is geolocated in the United States.

Registration took place on November 16, 2025 through Cloudflare, and the authoritative name servers include alec.ns.cloudflare.com, ns.cloudflare.com, ns2.cloudflare.com, and sneh.ns.cloudflare.c. TLS termination is provided by Google Trust Services under the WE1 certificate, and the site enforces HSTS while supporting HTTP/3, confirming modern web infrastructure. Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single external blocklist. PhishDestroy has confirmed the site as malicious and added it to its blocklist.

The available evidence classifies the operation as credential phishing targeting Meta‑related accounts, although the exact credential collection mechanism has not been disclosed. Defenders should immediately block the domain and its resolved IP at perimeter filters, update DNS threat feeds with the listed nameservers, and monitor for any outbound connections to Cloudflare‑hosted IP ranges that may be used for similar campaigns. Continuous re‑evaluation is advised, as the offline status may change and the host could be re‑activated under a different sub‑domain.