meta-valeon-5jt[.]pages[.]dev

The domain meta-valeon-5jt.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is currently marked offline. Its authoritative nameservers—adi.ns.cloudflare.com, evelyn.ns.cloudflare.com, karl.ns.cloudflare.com, and miguel.ns.cloudflare.com—reflect the typical Cloudflare hosting configuration. The site resolves to IP address 172.66.44.184, which belongs to ASN 13335 owned by Cloudflare, Inc., and is geolocated to the United States. TLS termination is provided by Google Trust Services under the WE1 certificate, and the site enforces HSTS while supporting HTTP/3, indicating a modern web stack.

An HTTP request to the domain returns a 403 status code, suggesting that the content is not publicly accessible at the time of analysis. Detection data show that 16 of 95 security vendors on VirusTotal have flagged the domain, and Google Safe Browsing classifies it as a social engineering threat. The domain appears on one external blocklist and has been actively blocked by the PhishDestroy service. The Gridinsoft trust score is 0 out of 100, reinforcing the assessment of high malicious potential.

The page title observed during scanning, "Meta for Business | Privacy Center," aligns with the claimed brand target of Facebook, confirming the campaign’s intent to impersonate the social‑media platform. Given the high risk rating and the combination of vendor detections, blocklist presence, and brand impersonation, defenders should immediately add the domain and its resolving IP to network deny lists, ensure that URL filtering solutions reference both Google Safe Browsing and PhishDestroy feeds, and monitor for any re‑activation attempts. Continuous observation of Cloudflare‑provided DNS records is advisable, as changes to nameserver configurations could signal a resurrection of the phishing infrastructure.