new-meetamarks[.]pages[.]dev

Analysis of the domain new-meetamarks.pages.dev indicates it was a credential phishing site hosted on Cloudflare infrastructure. The domain, registered on February 21, 2026, resolved to the IP address 188.114.97.3, associated with Cloudflare, Inc. in Canada. Nameservers damian.ns.cloudflare.com and nicole.ns.cloudflare.com were in use, consistent with Cloudflare's hosting model. At the time of assessment, the domain returned an HTTP 403 status, and Cloudflare's interstitial page titled 'Suspected phishing site' was presented, suggesting internal detection mechanisms flagged the content as malicious. Google Safe Browsing classified the domain under 'social engineering,' aligning with the credential phishing designation.

Gridinsoft assigned a trust score of 0/100, further corroborating its malicious classification. The domain appeared on one security blocklist and was blocked by PhishDestroy. Three of 93 security vendors on VirusTotal flagged the domain, though the specific detection logic or payloads are not detailed in available intelligence. Technologies detected on the domain included HSTS and HTTP/3, both commonly supported by Cloudflare. The domain's registration through Cloudflare, Inc. and its hosting on Cloudflare Pages align with patterns observed in phishing campaigns leveraging legitimate infrastructure to evade detection.

No specific brand impersonation or phishing kit was identified in the available data, and the exact content of the phishing page remains unanalyzed. Defenders should treat this domain as compromised and block it at the network level. Historical logs should be reviewed for connections to 188.114.97.3 or the domain itself, particularly in contexts involving credential submission or social engineering attempts. While the domain is currently offline, monitoring for reactivation or similar domains on Cloudflare Pages infrastructure is recommended.