meta-vyzen[.]pages[.]dev

The domain meta-vyzen.pages.dev was registered on 2025-11-07 through Cloudflare, Inc., and is managed by the Cloudflare nameservers ingrid.ns.cloudflare.com and zeus.ns.cloudflare.com. DNS resolution points to the IP address 172.66.47.148, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. The site presents an SSL certificate issued by Google Trust Services under the WE1 designation, indicating a valid TLS handshake. HTTP probing returns a 403 status code, and the page title returned by the server is "Suspected phishing site | Cloudflare," confirming that the host is presenting a generic phishing warning page rather than the expected content. Security telemetry shows that 14 of 95 VirusTotal vendors flagged the domain, suggesting a moderate level of consensus among anti‑malware engines that the host is malicious.

Additional detection vectors include a Gridinsoft trust score of 0 out of 100, placement on a single external blocklist, and active blocking by the PhishDestroy service. Header analysis reveals the presence of HSTS, Cloudflare edge services, and HTTP/3 support, all of which are consistent with the underlying hosting provider. The recorded scam type is Credential Phishing, but the specific credential targets have not been disclosed publicly. Current operational status is offline, and the site is no longer reachable.

Uncertainties remain regarding the exact phishing payload, lure content, and any associated command‑and‑control infrastructure, as no further forensic artefacts have been publicly released. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑registration attempts, and correlate any traffic to the 172.66.47.148 endpoint with known phishing campaigns. Continuous re‑scanning on VirusTotal and inclusion in internal blocklists are advised to capture any future changes in the threat profile.