checker-meteora[.]app

The domain checker-meteora.app was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently hosted behind Cloudflare’s network (AS13335, IP 188.114.96.3, United States). The authoritative nameservers are carrera.ns.cloudflare.com and morgan.ns.cloudflare.com, and the site served an HTTP/3 response with a 403 status code before being taken offline. The TLS certificate presented is issued by Google Trust Services under the WE1 root, indicating a legitimate certificate chain but offering no assurance of content safety.

The page title returned from the endpoint reads "Suspected phishing site | Cloudflare," directly labeling the host as a phishing resource. Independent threat intelligence places the domain on two blocklists, PhishDestroy and ScamSniffer, and VirusTotal reports that nine of ninety‑three scanning engines flagged the domain, reinforcing the suspicion. Additional reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating.

While the infrastructure details—Cloudflare protection, US‑based IP, valid Google‑issued certificate—are typical for many legitimate services, the convergence of blocklist listings, low trust score, and explicit page title indicate a high probability that the site was used for phishing. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any resurgence of the domain or related subdomains, and consider adding it to internal threat feeds. Since the site is offline, active investigation of payloads is limited; however, any logs referencing connections to 188.114.96.3 should be flagged for further analysis.