meta-radar-2ku[.]pages[.]dev

The domain meta-radar-2ku.pages.dev was registered on February 21, 2026 and is hosted behind Cloudflare’s network (ASN13335) with the IP address 172.66.44.57 located in the United States. DNS resolution is provided by nina.ns.cloudflare.com and fattouche.ns.cloudflare.com, confirming the use of Cloudflare’s managed name‑service infrastructure. TLS termination is performed by Google Trust Services under the WE1 certificate, and the site forces HSTS and HTTP/3 connections, indicating the presence of modern security controls on the hosting side. The HTTP response returned a 403 status code, and the domain has since been taken offline, but evidence of malicious activity remains.

Threat intelligence classifies the site as a credential phishing operation, and the page title returned by the server reads “Suspected phishing site | Cloudflare,” reinforcing that the content was identified as fraudulent by the hosting provider. Detection metrics show that 15 of 93 security vendors on VirusTotal flagged the domain, and it appears on a single external blocklist. Gridinsoft’s trust scoring system assigned a score of 0 out of 100, reflecting a high confidence of malicious intent. The domain is also listed by PhishDestroy as blocked.

For defenders, the immediate recommendation is to add 172.66.44.57 and the fully qualified domain name to network deny lists and DNS sinkhole configurations, as the infrastructure is already associated with a known phishing campaign. Monitoring for any re‑registration or re‑use of the same name servers should be incorporated into threat‑intel feeds, and security teams should ensure that endpoint protection and web‑gateway solutions reference the latest blocklist entries that include this domain. Although the site is currently offline, the historical activity indicates an active phishing infrastructure that could be resurrected or leveraged in future campaigns, warranting continued vigilance.