extnsion-metmsk-learn[.]pages[.]dev

The domain extnsion-metmsk-learn.pages.dev is a suspected phishing site, currently flagged as a high-risk generic_phishing threat and taken offline. It was primarily detected impersonating Cloudflare, Inc., a well-known cloud service provider.

Analysis indicates that the domain was registered through Cloudflare, Inc. and resolves to the IP address 172.66.44.236, which is located in the United States and associated with AS13335 Cloudflare, Inc. The domain was created on October 28, 2025, and has been flagged by 14 out of 95 security vendors on VirusTotal. Google Safe Browsing also identifies this domain as a phishing site. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. Additionally, the domain appears on 1 security blocklist, further corroborating its malicious nature.

Currently, the domain is offline, and the recommended course of action is to ensure that all internal systems and networks are updated with the latest threat intelligence to block access to this domain. Security teams should monitor for any attempts to revive the domain and implement additional measures such as DNS filtering and user education to prevent phishing attacks. Any users who may have interacted with this domain should be advised to change their passwords and monitor their accounts for unusual activity.