begin-app-meta-io[.]pages[.]dev

The domain begin-app-meta-io.pages.dev was created on February 21, 2026 and is hosted behind Cloudflare’s network (ASN 13335, United States). DNS resolution points to IP address 172.66.46.225 and the authoritative nameservers are brianna.ns.cloudflare.com and alex.ns.cloudflare.com. The site presented the page title "Suspected phishing site | Cloudflare" and returned an HTTP 403 status, indicating that access was blocked at the server level. The TLS certificate is issued by Google Trust Services under the WE1 profile, confirming the use of a valid HTTPS chain.

Reputation services rate the domain extremely poorly: Gridinsoft assigns a trust score of 0 / 100, Scamadviser records 1 / 100, and the domain appears on a single security blocklist (PhishDestroy). VirusTotal analysis shows that 14 of 95 scanned security vendors flagged the domain, while Google Safe Browsing classifies it as a social‑engineering threat. The registrar information lists Cloudflare, Inc. as the registration entity. Current status is offline, and the site has been taken down.

Evidence suggests the domain was used for credential phishing, but no further details about the targeted brand or payload are available. Defenders should continue to block the domain at perimeter filters, monitor for any residual DNS or IP activity, and update threat‑intel feeds with the indicators of compromise (domain, IP, nameservers, SSL fingerprint). Because the site is already offline, immediate mitigation focuses on preventing re‑use of the same infrastructure and ensuring that any user‑reported incidents are triaged against the documented indicators.