meta-comet-5qd[.]pages[.]dev

The domain meta-comet-5qd.pages.dev was created on February 21, 2026 and is currently taken offline. Infrastructure analysis shows it resolves to the IP address 172.66.44.158, which is owned by Cloudflare, Inc. (AS13335) and located in the United States. The domain is hosted on Cloudflare’s edge network, employing HSTS and HTTP/3, and presents a valid SSL certificate issued by Google Trust Services under the WE1 root. DNS resolution uses the nameservers carioca.ns.cloudflare.com and trevor.ns.cloudflare.com, confirming the registration through Cloudflare, Inc. The HTTP response returns a 403 status code, and the page title displayed by the server is "Suspected phishing site | Cloudflare," indicating that the site has been flagged by Cloudflare’s own phishing detection mechanisms.

Threat intelligence records show that 14 of 93 security vendors on VirusTotal have flagged the domain as malicious, and it appears on at least one public blocklist, with PhishDestroy actively blocking it. Google Safe Browsing categorises the site as a social engineering threat, aligning with the reported scam type of credential phishing. Reputation services assign extremely low trust scores—Scamadviser rates the domain 1 out of 100, and Gridinsoft scores it 0 out of 100—further underscoring its malicious intent.

While the specific target brand or service being impersonated is not disclosed in the available data, the combination of a Cloudflare‑issued phishing warning page, multiple vendor detections, and a social engineering classification provides a clear indication of credential harvesting activity. Defenders should add the domain and its associated IP address to blocklists, enforce DNS‑level blocking, and monitor for any residual traffic that may bypass the current offline status. Continuous re‑evaluation is recommended, as the domain could be re‑activated or used in future campaigns.