meta-phonix[.]pages[.]dev
Análisis de phishing y seguridad de meta-phonix.pages.dev
“Suspected phishing site | Cloudflare”
meta-phonix.pages.dev — Accesible · acceso restringido (HTTP 403). Suplantación de marca: Genericcloudflare; Tipo de estafa: Credential Phishing. Resumen de las pruebas: VirusTotal 16/93 (ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, CyRadar); URLScan malicious verdict; Google Safe Browsing flagged; CF Radar malicious; PhishDestroy score 100/100. Registrador: Cloudflare.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Evidence Analysis
Analysis of meta-phonix.pages.dev, created on 21 February 2026, indicates that the domain is being used for credential phishing. The site is hosted behind Cloudflare’s network (AS13335, United States) and resolves to IP address 172.66.47.7. DNS records show the authoritative nameservers raquel.ns.cloudflare.com and mack.ns.cloudflare.com, confirming the use of Cloudflare’s edge services. The SSL certificate presented is issued by Google Trust Services under the WE1 designation, and the connection is protected by HSTS and HTTP/3, reflecting a modern TLS configuration despite the malicious intent.
The page title returned by the server is "Suspected phishing site | Cloudflare", and the HTTP response code is 403, indicating that the content is blocked or unavailable. Independent security services have identified the domain as high‑risk. PhishDestroy has listed it as blocked, and Google Safe Browsing flags it for social engineering. VirusTotal reports that 16 out of 93 scanning engines have flagged the domain, reinforcing the suspicion.
Reputation services assign extremely low scores: Scamadviser rates it 1/100 and Gridinsoft 0/100. The domain appears on a single security blocklist, further confirming its malicious classification. Given the observed indicators, defenders should add meta-phonix.pages.dev to URL filtering policies, block the associated IP 172.66.47.7 at the network perimeter, and monitor for any outbound connections to Cloudflare edge nodes that may be leveraged for similar campaigns. Continuous re‑evaluation is advised, as the domain status may change if the operators reactivate the site.
Cobertura de los datos13 recorded checks
Inteligencia de seguridad de red
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100 % de confianzaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100 % de confianzaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100 % de confianzaAnálisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of meta-phonix.pages.dev · checked Mar 2, 2026
Datos y informes externosIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.