wallet-meta-io[.]pages[.]dev

The domain wallet-meta-io.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is served from the Cloudflare edge network (AS13335 Cloudflare, Inc.) at IP address 172.66.44.111, which geolocates to the United States. The site presents a Cloudflare‑issued SSL certificate signed by Google Trust Services (WE1), and its DNS is delegated to odin.ns.cloudflare.com and lola.ns.cloudflare.com. An HTTP request to the root URL returns a 403 status code and the page title is "Suspected phishing site | Cloudflare," indicating that the content has been flagged by Cloudflare’s own detection mechanisms. The domain appears on a single security blocklist and is actively blocked by PhishDestroy.

VirusTotal analysis shows that 12 of 93 scanning engines flagged the domain as malicious, and Google Safe Browsing classifies it as a social‑engineering threat. Independent reputation scoring from Gridinsoft assigns a zero‑point trust rating (0/100). The intelligence categorizes the activity as a crypto scam, specifically a crypto drainer, and assigns a high risk level.

The site is currently offline, but the infrastructure artifacts remain observable. Defenders should add the domain and its resolving IP address to network‑level deny lists, monitor for any re‑hosting attempts on other Cloudflare‑controlled subdomains, and enforce endpoint protection policies that respect Google Safe Browsing and VirusTotal detections. Continuous re‑assessment is advised, as the offline status may change and the underlying IP belongs to a shared Cloudflare pool that could be leveraged for future campaigns.