meta-sorin-wylar[.]pages[.]dev

The domain meta-sorin-wylar.pages.dev was registered through Cloudflare, Inc. on February 21, 2026 and is currently marked as offline. DNS resolution points to the IP address 172.66.47.161, which belongs to AS13335 Cloudflare, Inc. in the United States. The site served over HTTPS using a Google Trust Services / WE1 certificate and advertised HTTP Strict Transport Security (HSTS) as well as HTTP/3 support, indicating a modern Cloudflare front‑end. An HTTP request returned a 403 status code, consistent with the page title "Suspected phishing site | Cloudflare" displayed when the domain is accessed.

Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 out of 100 and Scamadviser reports 1 out of 100, reflecting a high likelihood of malicious intent. The domain appears on one security blocklist and is specifically blocked by PhishDestroy. VirusTotal analysis shows that 16 of 93 scanning engines flagged the domain, reinforcing the suspicion of credential‑phishing activity. The available evidence confirms that the infrastructure is hosted on Cloudflare’s network, leveraging its CDN and SSL capabilities to obscure the true backend.

Uncertainties remain regarding the exact phishing payload, target brand, or credential collection mechanism, as no page content beyond the generic title has been disclosed. Defenders should continue to block the domain at network perimeter, update URL filtering lists with the observed indicator, and monitor for any resurgence of the hostname. Analysts are advised to correlate any inbound traffic to 172.66.47.161 with the timestamp of the domain creation and the observed 403 responses to differentiate legitimate Cloudflare services from malicious use.