desktop-metamusk-us[.]pages[.]dev

The domain desktop-metamusk-us.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the IP address 172.66.47.77, which belongs to AS13335 Cloudflare, Inc. in the United States. The site is protected by a Google Trust Services certificate (WE1) and employs HSTS and HTTP/3, indicating a modern HTTPS configuration. HTTP requests to the host return a 403 status code, and the page title presented by the server is "Suspected phishing site | Cloudflare," suggesting that the content has been taken offline or flagged by Cloudflare’s protective services. Security analysis shows the domain is listed on one public blocklist and is being actively blocked by PhishDestroy.

Reputation scoring from Gridinsoft assigns a zero out of one hundred trust score, reflecting extreme malicious confidence. VirusTotal scans have recorded 12 positive detections out of 93 antivirus engines, reinforcing the classification as a credential‑phishing vector. The nameservers amit.ns.cloudflare.com and melina.ns.cloudflare.com are consistent with the registrar’s infrastructure.

At the time of this report (July 25, 2026) the site is offline, but historical indicators confirm malicious intent. Defenders should add the domain to local deny lists, monitor for any re‑registration or resurrection of the host, and continue to enforce URL filtering policies that block Cloudflare‑hosted subdomains exhibiting similar characteristics. Incident response teams should also correlate any authentication attempts involving the domain with user reports to identify compromised credentials and enforce password resets where necessary.