meta-acorn-5rx[.]pages[.]dev

This domain, meta-acorn-5rx.pages.dev, is identified as a high-risk fake login phishing site. The domain poses a significant threat to users by attempting to mimic legitimate login pages, thereby tricking individuals into providing sensitive information such as usernames, passwords, and other personal details. The primary objective of this campaign is to gain unauthorized access to user accounts, potentially leading to financial loss, identity theft, and further malicious activities.

Analysis indicates that the domain has been flagged by 15 out of 95 security vendors on VirusTotal, a notable detection rate that underscores the domain's malicious nature. The domain is registered through Cloudflare, Inc., and was created on October 09, 2025. Infrastructure analysis reveals that the domain resolves to the IP address 172.66.44.137, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The SSL certificate is issued by Google Trust Services, which can lend a false sense of security to unsuspecting users. Additionally, the domain appears on two security blocklists, including PhishDestroy and PhishingDB, further confirming its status as a phishing site. Google Safe Browsing also flags the domain as a phishing site, providing an additional layer of verification for its malicious intent.

Users who have visited meta-acorn-5rx.pages.dev are strongly advised to change their passwords and enable two-factor authentication on all affected accounts immediately. It is recommended to monitor account activity for any unauthorized transactions or changes. Users should also consider running a comprehensive security scan on their devices to ensure no malicious software has been installed. If any personal information was entered, users should report the incident to their respective service providers and consider contacting a cybersecurity professional for further assistance.