# meta-xornil.pages.dev — MALICIOUS

> Discover why meta-xornil.pages.dev is flagged as a high-risk phishing domain and what you should do to stay protected online.

## Summary
PhishDestroy identifies meta-xornil.pages.dev as a high-risk generic phishing domain. Phishing threats are designed to steal sensitive information like passwords and financial data by masquerading as legitimate websites. Such sites pose significant risks to users, potentially leading to identity theft and financial loss.

This domain was registered recently, on February 21, 2026, through Cloudflare, Inc., a popular hosting and DNS provider. The site has been flagged by multiple security vendors and appears on two prominent security blocklists, indicating a consensus among cybersecurity experts about its malicious intent. Notably, it is currently offline, which suggests it may have been taken down to prevent further harm.

Users are strongly advised not to visit meta-xornil.pages.dev or provide any personal information if they encounter it. Maintaining up-to-date security software, being cautious of unsolicited links, and verifying website legitimacy before entering sensitive data are essential safety practices. If you suspect you have interacted with this domain, consider monitoring your accounts for unusual activity and changing passwords immediately.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.159
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["rosalie.ns.cloudflare.com", "lee.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "Criminal IP", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Phishing Database", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ca2b8-2639-70ca-a024-3b1d80e56842.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/afd890c9-c517-4573-977b-bf48ecbcf134
- PhishDestroy: https://phishdestroy.io/domain/meta-xornil.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/meta-xornil.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/meta-xornil.pages.dev/
Last updated: 2026-03-19