meta-luxin[.]pages[.]dev

The domain meta-luxin.pages.dev is flagged as a high-risk credential-phishing site. Registration information shows the name was created on 21 February 2026 through Cloudflare, Inc., and the authoritative nameservers desi.ns.cloudflare.com and emerson.ns.cloudflare.com resolve the domain to the Cloudflare edge address 172.66.47.84, which belongs to AS13335 (Cloudflare, Inc.) located in the United States. The site presented the page title “Suspected phishing site | Cloudflare” and returned an HTTP 403 response, indicating that access was deliberately denied, a technique often used to conceal malicious payloads after takedown. TLS negotiation employed a certificate issued by Google Trust Services under the WE1 identifier, and the connection enforced HSTS and HTTP/3, consistent with Cloudflare-hosted services.

Google Safe Browsing categorises the URL as social-engineering, and VirusTotal recorded 16 detections out of 93 scanned vendors, confirming the presence of malicious indicators. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy mitigation service. Independent reputation services assign extremely low scores: Gridinsoft reports 0/100 and Scamadviser 1/100, reflecting a near-certain malicious intent.

Because the site is currently offline, no further content analysis is possible, and the exact phishing kit or targeted brand cannot be confirmed. Defenders should treat the address as malicious, add it to network-level deny lists, and monitor for other subdomains under the same Cloudflare account that may be leveraged for similar campaigns. Continuous re-evaluation is advised in case the domain is re-hosted or the underlying infrastructure is reused.